last executing test programs: 9.514341196s ago: executing program 2 (id=246): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x497, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b62794318eb3955b01303fb2fef03b200000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xab, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="0000000000000078675d900c93d35a3fa1fa80d82860272bf5c0886860e55e1f55ce", @ANYRESHEX=r9, @ANYBLOB=',\x00']) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x1eb081) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYBLOB="7da87a01294bf3f144eebaa608f7ab204654ff8bd82437e79eab327e41a6e469046542582822f0083e8c05fd9253272198d36978b2bf15a154934abc70c8a2d7ece909bc9e2b9b9136e75ba9e009bbdca5d8f5473c5d92672c4fc7ebc0cb1a0193babb53ce35a6129210a2d38312d539d8f0aa85a125c1d0cb82092163155567753b42416bd5d943", @ANYBLOB="01f46ff29fdff79d9ad2ffef6bb8b2ce613e0ed033b00cdeedaee6c30a7c06a1500fc068a8ef286738301eaefaaaee498c85457e5ddd61e1d2a2c82440cc0d6a813ec149e9c3120b87e960f3a377895247575f0521db97d6865493246938098d0d7bcb209c0e68730a9bb6300d565e907f096af85e42107841d48fc9bed99058fff2dda2569dd25f4e04cce2857da273c344b615cbe29365e3bcfa03d6e1235658cfacff4cbcf50c083e02a2d223aac10be39600a3cc99f43f8b5c1374c9e86ac7eede36be", @ANYRES8=0x0, @ANYRESHEX=r2, @ANYRESHEX=r4, @ANYRESHEX], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x60700, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000700)=""/101, &(0x7f0000000180)=0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r10}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.059014724s ago: executing program 2 (id=249): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[], 0x1, 0x5578, &(0x7f0000002480)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000240)='./bus\x00', 0x322020, &(0x7f0000000240)=ANY=[], 0x1, 0x0, 0x0) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000800)) 6.225593999s ago: executing program 2 (id=265): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(0x0, 0x0, 0x0, 0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414400c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000070000d801400080000"], 0xd4}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r7, &(0x7f0000001a80)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0x1}, @ipv6=@icmpv6={0x6, 0x6, "a44cda", 0x10, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x1ff, 0x1, 0xf}}}}, 0x42) r9 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a00030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r9, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r9, &(0x7f0000000440)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x48, @string={0x48, 0x3, "9bcc602c717c243c2a8b654d947ac063d58edd8029d952e45f057148b47c85657cdb7b18bccf9884af7d0c26b66d9e70215e0e3a587c06db4c7bd63989893b54042a5cf77bf3"}}, 0x0, 0x0, 0x0}, 0x0) 5.584057042s ago: executing program 1 (id=267): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=r2, @ANYBLOB="1808000000000000000000000000000018120000"], &(0x7f0000000000)='syzkaller\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.395023546s ago: executing program 1 (id=268): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 5.363548266s ago: executing program 4 (id=270): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r0, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffc010005000000000000000023000001ff02000000000000000004000000000000009078080002000000000000000000"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESDEC=r0, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x11, 0xc, &(0x7f0000002380)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="c72b74553a0439f7f4fb5d5f376f52e69fa9bcad8db791cf268555c25f4a64a5a1a4c43a69753f32def8acaf1452af56bf534a5317e2a8b0a4cd8012de1e6bedb3ccbf44360491d55a19ccae6d0990524a36bbd3b4597be26297b4f688afb8ccdff3", @ANYRESOCT=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x803, 0x0) getpid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4080484, &(0x7f0000001040), 0x0, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) socket(0xa, 0x800, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x4) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000013c0)=[{{&(0x7f0000000380)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000400)=""/12, 0xc}], 0x1}, 0x10000}, {{&(0x7f0000000580)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)}, {&(0x7f0000000600)=""/141, 0x8d}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/26, 0x1a}], 0x5}}, {{&(0x7f00000008c0)=@sco, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f0000000ac0)=""/238, 0xee}, {&(0x7f0000000bc0)=""/48, 0x30}], 0x4, &(0x7f0000003440)=""/222, 0xde}, 0xfffffffe}, {{&(0x7f0000000d40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000dc0)=""/144, 0x90}, {&(0x7f00000016c0)=""/211, 0xd3}, {&(0x7f0000000f80)=""/130, 0x82}, {&(0x7f0000001500)=""/84, 0x54}], 0x4}, 0x64cb4e6a}, {{&(0x7f0000001100)=@hci, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/218, 0xda}], 0x1, &(0x7f00000012c0)=""/230, 0xe6}, 0xdbd}], 0x5, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) 5.207140689s ago: executing program 0 (id=272): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x894a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) (async) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x7, 0x3b, 0xbc, 0x20, 0x5e3, 0x502, 0xb2ac, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1a, 0xeb, 0x39}}]}}]}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x2, 0x4, 0x1}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000080)={r2, 0x2, 0x4, 0x1}) ioctl$UI_SET_RELBIT(r5, 0x40045566, 0xb) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) (async) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088a80180c2000002aaaaaaaaaabb86dd69dc11c101c784"], 0x201) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) (async) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) syz_open_procfs(0x0, 0x0) 5.206048229s ago: executing program 1 (id=273): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ec0000000000000000a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06adb7b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02040000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f6505003cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096746a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140495fde085", @ANYRES32], 0x1, 0x556c, &(0x7f000000b500)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x9, 0xfff, 0x9}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {}, [{0x8, 0x4}]}, 0x2c, 0x0) 4.247806958s ago: executing program 0 (id=274): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000007000000ffffffff0900000001000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00'], 0x50) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x100000001, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000005480)=ANY=[@ANYBLOB="fdd8000004000000e27f00000100000018df51d9476f4c4b935e95a79372fe53384a08005936f3800b573b70c0cd5600d25ae280e604c964dd9f5a72359731ef3b7512597d9a60844f6a7bbae71a051fe5776130c37c2bba8eed9d7c8c345b10bc3c184a2d83419bb92ecd60ccc74e280b450ae027d1f4ecad6cd40ee972816cf1db8920382b744242cdf96492fb381e647414cac565455a569525e52d0cc866c421f4c9e8b36534d93a086bae8aaf11c76f0fe08f47d486f0655a091b134a104ea800252a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000900)=ANY=[@ANYBLOB="180000005d7fffff00000000040000000700740a877de56b089308c97c7896a8000000003f1719e65fe21dbc1d5916f7b0ca225dc538c084f286df7ef55c1150e91592eeb8a6881ded717f6b0de2a53cfcc75a61e4391fdbadb52e283a6a2566810a372d633b312eaa7d78d9dbdc913ec1e32842aa704277", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r7 = dup3(0xffffffffffffffff, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) gettid() (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/104, 0x68}, {&(0x7f00000004c0)=""/68, 0x44}], 0x2, &(0x7f0000000400)=""/6, 0x6}, 0x3800}, {{&(0x7f0000000580)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000840)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/90, 0x5a}, {&(0x7f0000000700)=""/103, 0x67}, {&(0x7f0000000780)=""/120, 0x78}, {&(0x7f0000000800)=""/28, 0x1c}, {&(0x7f0000005380)=""/209, 0xdd}], 0x7, &(0x7f0000000ac0)=""/90, 0x5a}, 0x7f}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000b40)=""/144, 0x90}, {&(0x7f0000000c00)=""/237, 0xed}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000000d00)=""/153, 0x99}, {&(0x7f0000003380)=""/238, 0xee}, {&(0x7f0000003480)=""/227, 0xe3}, {&(0x7f0000003580)=""/247, 0xf7}, {&(0x7f00000008c0)=""/16, 0x10}], 0x8, &(0x7f0000003680)=""/184, 0xb8}, 0x401}, {{&(0x7f0000003740)=@ax25={{0x3, @rose}, [@rose, @null, @null, @netrom, @null, @null, @remote, @netrom]}, 0x80, &(0x7f0000004b40)=[{&(0x7f00000037c0)=""/191, 0xbf}, {&(0x7f0000003880)=""/76, 0x4c}, {&(0x7f0000003900)=""/60, 0x3c}, {&(0x7f0000003940)=""/4096, 0x1000}, {&(0x7f0000004940)=""/251, 0xfb}, {&(0x7f0000004a40)=""/22, 0x16}, {&(0x7f0000004a80)=""/134, 0x86}], 0x7, &(0x7f0000004bc0)=""/3, 0x3}, 0x4}, {{&(0x7f0000004c00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004c80)=""/185, 0xb9}, {&(0x7f0000004d40)=""/222, 0xde}, {&(0x7f0000004e40)=""/99, 0x63}, {&(0x7f0000004ec0)=""/217, 0xd9}], 0x4, &(0x7f0000005000)=""/203, 0xcb}}, {{0x0, 0x0, &(0x7f0000005340)=[{&(0x7f0000005100)=""/55, 0x37}, {&(0x7f0000005300)=""/17, 0x11}]}}], 0x6, 0x10122, 0x0) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) (async) sigaltstack(&(0x7f0000000380)={0x0}, &(0x7f00000003c0)={0x0}) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4.084975411s ago: executing program 3 (id=275): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffde8, 0x0}}, 0x1f) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f00000003c0)=""/163}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='incremental-fs\x00', 0x0, 0x0) 3.955039144s ago: executing program 3 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x3}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.954668923s ago: executing program 4 (id=277): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080008000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095e2285f14bcc4e36e71784ca6c69c31e61815d41477ec909bb85a7c1ff89fa942f3ebc1e316e3126cdd881931f3c401a8f55f628b146e4ab4"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/12, 0xc}], 0x1) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x1) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, &(0x7f0000000740)='logon\x00', 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001020090780000"], 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x8084) 3.912033084s ago: executing program 4 (id=278): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) (async, rerun: 64) umount2(&(0x7f0000000100)='./file0\x00', 0x9) 3.839286866s ago: executing program 0 (id=279): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x3ff) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000be0000000000b7080000000000007b8af8ff00000000bfa2000000000000fd010000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0xfffe, 0x77, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r8, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0x0, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) epoll_create1(0x80000) 3.247685307s ago: executing program 3 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 2.906896694s ago: executing program 4 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000080000000007000000001811000073b5a654da4dcf", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r5}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05a2f6d3ca38e66f760476dcd96db03b4600042bbcc7b88d7c4b27b256d252e69c8704002d00", @ANYRES32, @ANYRESOCT=r9, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000745fcfb3c86f82faecca1cf2500"/41], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="00000000000000b7080000fe0000007b8afa09000000ffffdc00dfffb70300000000ddf2adf100000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = dup2(r11, r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) rt_sigaction(0x19, 0x0, 0x0, 0x8, &(0x7f0000000440)) r13 = open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r1, r13, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540), &(0x7f00000006c0), 0x7, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r14}, 0x10) r15 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r15, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 2.790401896s ago: executing program 4 (id=282): r0 = socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000085000000070000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, &(0x7f0000000140)={0x0, 0x4, 0x2d, {0x2d, 0x7, "c87bf9b1b5f8c22336268dfdfb84abff82ac765ce4de974413bcf6640f5427f7a0398fc9a352ebae28fadd"}}, &(0x7f0000000480)={0x0, 0x3, 0xa, @string={0xa, 0x3, "403510cb162baf15"}}, &(0x7f0000000600)={0x0, 0xf, 0x116, {0x5, 0xf, 0x116, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xfb, 0x0, 0x6, 0x0, 0x200}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "8092485fef9a4941dc9a510fb267eb27"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x6, 0x6}, @generic={0xea, 0x10, 0x3, "ceded9bd7ed5fe6102a8588d458de963efe111f5d5964b7230149966848fa0e85fadfb82aed92a57dccc21fb258719af0da9bf20a0c64b847b808e2be06ff6075f400303b6baeb773ccbcab0b46e77c3341258841c6734e279305f4a03a2a24c0d9062e0689eb754d64ccb57b51eb26e9c46790b3c0953b2d2b6e75c2f66c3e1b1ce89d157479c04d49e0671706595b3a4031bcce68478bada9a8323be18f2bca4364b0d9394ee1d045a61ac42a8443b37a9dc9b721e6dd9376cfdb48ae4412b2b3abd83848f1fb7c99eca67f984eb8ffc4a5ee02d040caa23de76b4f4da0dec999f847506637b"}]}}, &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x4, 0x26, "0a2d8ca0", "d8153706"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0xc, 0x2, 0x1, 0xfffd, 0x2}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a80)={0x0, 0x10, 0x1, "b4"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x6}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "4cdb"}, 0x0, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "5d8b"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x2}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000f40)='fsi_master_read\x00', r5}, 0x18) ustat(0xf000000000000000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) 2.278080046s ago: executing program 1 (id=283): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x20, 0x111, 0x0, 0x1, {0x9, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}]}]}]}]}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x20, 0x111, 0x0, 0x1, {0x9, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}]}]}]}]}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x2, 0x5, 0x4b0, 0x0, 0xf0, 0xffffffff, 0x0, 0x310, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @remote, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) (async) 2.136280409s ago: executing program 1 (id=284): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 2.07011157s ago: executing program 3 (id=285): syz_usb_connect$uac1(0x0, 0x8a, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x8, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa65d, 0x4}, [@processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0xf, "057a8a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x4c, 0x8, {0x7, 0x25, 0x1, 0x80, 0x9, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xe, 0xfb, 0x1002}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x4, 0x52, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7a, 0x80, 0x40, {0x7, 0x25, 0x1, 0x3, 0xf, 0x32}}}}}}}]}}, 0x0) syz_usb_connect(0x1, 0xb93, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x3f, 0x44, 0x7c, 0x8, 0x4b4, 0xbdc, 0x54a5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb81, 0x4, 0x98, 0x91, 0x20, 0x81, [{{0x9, 0x4, 0xe2, 0x7, 0xa, 0xd8, 0xff, 0x6, 0xfc, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "eeccd6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xfffffffc, 0x9a, 0x200, 0x4}, {0x6, 0x24, 0x1a, 0xfff, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x10, 0x7ff, [0x100]}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0xfb}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x2, 0x4, "e0f8b5a0e57e"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0x5, 0x5, 0xa], 0x4}, @selector_unit={0xb, 0x24, 0x5, 0x6, 0x3, "8cf0e9d7114e"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x7f, 0x4, 0x0, 0xff}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0x3, "c5edda"}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0xd, "55d7756c"}]}], [{{0x9, 0x5, 0x0, 0x0, 0x40, 0x6, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfffe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x100}]}}, {{0x9, 0x5, 0x7, 0x8, 0x200, 0xf4, 0x5, 0x4d, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xfff9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x3, 0x2, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x9}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x0, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x3}, @generic={0x14, 0x22, "f000a06435eb12d7af968e4f735ed0e83ab7"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xac, 0x5}}, {{0x9, 0x5, 0x5, 0x8, 0xfb3258f88d2145c, 0x40, 0x19, 0x64}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x0, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}, @generic={0x78, 0x21, "9f18e2303fee57e7f09642c1171f246c547fcfcceda777ee91e2b0aa79d2f55e94eb497e5ed406bd6f8f498da2db83a9c68aba77dec2ba1304077e94f7063030b306fd24654e621f6f6d0e75291f121c0d93bca6385f9a9e91de2269e0c31cc3987c860029878916df7477813c351139ef3c33dd95df"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x36, 0xd, 0x6, [@generic={0xc4, 0x0, "e5dca2df59b1f6a60081da1e282e9c623b10c79b43e306dbfc71a754756e2ee27e6b9d8ab3b4cf292a18607f433da58751fb65a4fc70c96635fea942532d0a95eb9b9067cdd6d1cc4b4f60c1e94819026a989e8297c7fbc61af10ddd06f5762fb64de2fc2cb87b0a3c716930ec3ce370a7ee9d8e389d1edc391a374b0135fca15cef697ce3a7eded2197d5adecf44457261d58a09f144bcbca2218b0711a93d93bdcc2e21a0502b4896f3e07fa43f12958de922ad9a09d9678cb18733cf32f4ca614"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x0, 0x0, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xc3}]}}, {{0x9, 0x5, 0x8, 0x4, 0x10, 0xf, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x5, 0x8001}]}}]}}, {{0x9, 0x4, 0x72, 0x5, 0xe, 0x98, 0xc1, 0x1f, 0x0, [@generic={0x8e, 0x22, "5247d658d8e17d7ef4bb84cb1f75be22b6aa3a070aeff23f4d5650907bdd177fcde2769134d7244c5af6c2e15795c99782fb1099c0e0e6688beec0c18a1fefdfa1fc19955f7affe2d9d3a7f67f46826ebd03aaacdb20df9a5bc8ef32c2d80d909f6d6600cfae1f52361a9f2c80cf6affb19afd90aede004b2b7f9b77c9f282cdd667220063d336f163c53952"}], [{{0x9, 0x5, 0x1, 0x3, 0x40, 0x4, 0x1, 0x4, [@generic={0x70, 0x22, "bfa01e665da7e949d339581f56fc234a01b49a9837da8c4aa976ee6086fb7748ca8a67e769c75d3f23578dbdf7e677a612754481443f9954f3e089baef342e39b7b1c9c898acc243ef74e97177ec571dbc00509caff13ad7f6e8dd25a7c5320f6c120a0798625a969bdd7c161bbe"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x7, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xe, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf, 0x6}, @generic={0x70, 0x22, "6cf646ddd59f1916cce5fbdaa7701bcbe9cd914fa739c80dd415e8cfbce80db224355f7592e0cd411cfa46622dcbbe51923df0a2f59367abe36102b838db655c397042bf1f28031ef8993d72667783f0b9e31090b6857b73add9f5b6cfc83cbd3ea8cae4ddef714e9fb2575c822a"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xfc, 0x4, 0x8, [@generic={0x5d, 0x21, "1691dbbadb4fcbe808cdc22f738cec48e829b5feda8895b8c3b2326590f51ee576596884146aef8bdc4f62643a4702f5d52ff403700ff6af6f4fcb1b1203ac9c9dc703ead080d9c83f98831d94fe7da241fc6c4cdab02e45375906"}]}}, {{0x9, 0x5, 0x81, 0x10, 0x240, 0x2, 0x3, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x77, 0x7}, @generic={0xe5, 0x2, "57a541662ce79094f63ac82f9ec8033c240175149e98e35bbb3521f33d9f5cc38c36eb3c2112debb48a228c4a714be8b4426d01b0f7c78a88cac58991910e882fa7c70669550f54e5fdf781802e4e12167fdf95b727def82a3242304412824be53bd8da1e280608f8a24310ba724392dddd9bfa84c5ec230e1548e4719994748dce059783a5773339dc402d638293f004a4bba5d666560b0ac13704db2b1107074b1ba7df3deac5d87b2a717235d00cc84e8d9c6ae1fe6a3439a41dfb2710649175a40595b75d51484859217fe491d262de141e43de2febe4b304dd78f9422a243401d"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xa, 0x0, 0x4, [@generic={0xb7, 0x11, "bef80909932b5a971403f0ae5c72c565340f50941499a3abad3fcc5fe230e78b958442f508266f18ab9ae810728087709c15e445bfed76eb5703776258001f6e3cf4573bfb1cc8205d60d9a9d6d710157763fd70b23f574899eaeeb33e820ea5081f98d1de37def3878f7acc49ad653e7efc73d1befe80bb57af3df1517fdb63442db6b2c2e14617f0ecc6c3893d7617cd228c29da524b543a059fd1ef41203bff78fc781b74e083fc61f9a2a6a8dc87e61c6b6ac9"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x20, 0xf9, 0x7, 0x9}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0x8, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0x6, 0xb, [@generic={0x93, 0x0, "fe32950abdf7c32c014d2df45729962bc2228e0edae90dede0d1ad3dfaaea7c3d7d624d9a6a83ba2961ccd6ea515758b1d2cbe8ec5f76aaf1fc69fc70690666b064f3f929c39b57c7c490eff8d4b22ddc9db2a12d5713afa6a2a73cc9bde2868ade1a7c11ae67c8ac5e127cb4d6dca28680f9dc6cfc3aa63419460525c137e8bd6f7453b8e0dbb74b2523360114edec4c3"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0xff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0xff, 0x0, 0x6, [@generic={0x34, 0xe, "08a2a26eee649e9802c3bf3a635cdccb9b5a81198acc95a8e3f17e52f136512e806d995219656f416b0281495b838b8d4c44"}, @generic={0x6a, 0x21, "a4765dc78391782269b91e8614d412d7cec8ebdc4a1535c722f05102c323b64e247856cc9f169fd4a735dc6029bc156ee1bd33ae724e1e1f1bfbe053a60412833f1c669804c3c6ec80085d68e2c8598a234d8c39645d67d8c1eb8bcbc1a26d0a293323930239f5b6"}]}}, {{0x9, 0x5, 0xf, 0x8, 0x10, 0x7, 0x81, 0x1}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x7, 0x40, 0x2, [@generic={0xa, 0x22, "fa04b41bb5272664"}]}}, {{0x9, 0x5, 0x3, 0xcd17b08e91b1b804, 0x10, 0x3, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x1}]}}]}}, {{0x9, 0x4, 0x2b, 0x20, 0x4, 0xa5, 0x2d, 0x28, 0x8d, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "ad"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x8, 0x7}}, @hid_hid={0x9, 0x21, 0x7280, 0x2, 0x1, {0x22, 0xceb}}], [{{0x9, 0x5, 0xb, 0x10, 0x400, 0x9, 0x4, 0x6, [@generic={0x90, 0xc, "d1015df80929e9c02554420d32e6df3d6f299c6d94bcabf384af36fea098d9aa6523eb2ccf2c9aab91616a749b909f2ae242cc91efa34be24d1c9ccd32c1712660f7f5cd65966fe95d2d91563574f236285d2639cf639cd5a0021cf5df67c2f2542879d513e6854021aff144c09b53ba0c9674255de834284d37142d0405ea28a7146f1bc8ce5353440b8b3d21ed"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}]}}, {{0x9, 0x5, 0x2, 0x8, 0x8, 0x8, 0x4, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x0, 0xf4, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xd, 0x8, 0x40, 0xf7, 0x3, 0x1, [@generic={0xb1, 0x25, "24bf9beb0e1d212f5ecf48af8eedf15c3e41821673c7cc04749e638a7e8b6670e4757e1711c945e916ee70b1d0739b0df6faee49a6422ccc7e9df98c3f426ca1274fbc013ac09fb246e28fb91a77e42e56f3014d62f4c2ec42c68d1eb4c1618ab80b9f08ca9048020e17fe62d8c7aa336be6cf3ef24f4d30e675b4424bbef666f60af44690d2dcd36294388b693a6a5de4054bf5d52d3f6219e05190ce306bf1a28c804c77f56b61b1b49860537921"}]}}]}}, {{0x9, 0x4, 0x56, 0x8, 0x4, 0xf9, 0xb6, 0x65, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x200, 0x8000, 0x7f}}, @uac_control={{0xa, 0x24, 0x1, 0x2a85, 0x1}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x9}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x1, 0x7, "b258a120"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x101, 0x5, 0x8, 0xff, 0x3, 0x8}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x4, 0x10, "3be9d167"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x3, 0x4b, 'Qu2'}]}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0xff, 0x9, 0x4, [@generic={0x9d, 0x8, "84c95a77571cf511857c4b048d24697b7a7053bd6268af51f57e94d41b9398b6fc9b154648bfa5bd40d682412fa306613c8e519f6515123cd6216b6b96330ae9b2819a01ee1e7abbe451ead79c92279afd6ce5127bc9b06405f250085434956c2f80d9dd98e0eb39713fec7e7c8e83804bf23afed185186f745ed0c7cbe2fcd393764250734505d580f980b790e4bcd89a72c0e16b65fa5bf016ea"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x8, 0x6, 0xff, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x2}]}}, {{0x9, 0x5, 0x3, 0xc, 0x8, 0x5, 0xf, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}, @generic={0x101, 0x3d, "13b24b3a226ac0ca75d1ec8e54a9387720bf8af9299eff84caa0f33032e3186bc8dc6516a9a42e3d70a93ff55ed49e38bfc72b5d4956d7a41f189d2d759b8ad6a02fde9fcf4c8bc77e22df62d28c3eff30435376d550b3b2474d8c553580977290d39a257494aa01f5d323bbfaf6c115b9a775453e4a95849ac5b90dd489c0d493784c2b043dad156dbf8aabe3bd40cb904e516b7a50dde4390e01462a8439baf544d85c5bf5c3e2a54fb98418458174689785447b85fd0fb1532ec8720e76022bc6b0f5b2cc97bac4264a5f12a261fbc3c127e9a22fece957a3f7a777a6f22e4457207e2c6ae84dfd49065c8a63cab373911184b4bc81936d0cd85b1527fd"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x2, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x100}]}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x1c, 0x6, 0x4, 0x68, 0x1}, 0x52, &(0x7f0000000040)={0x5, 0xf, 0x52, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x2, 0x9, 0xff, 0x28}, @ssp_cap={0x24, 0x10, 0xa, 0x96, 0x6, 0x10, 0x0, 0xffff, [0xff00c0, 0x0, 0x17f00, 0xf0, 0xff0000, 0xffc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x3, 0xf000, 0x2280, [0xc030]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0xd, 0xb, 0x6, 0x4}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x416}}, {0x25, &(0x7f0000000e40)=@string={0x25, 0x3, "1b77492ae8a734826baaef5d2e290a8405cc815283e44a924f2cd923c385fe920bc5ef"}}]}) syz_usb_connect(0x1, 0xbb, &(0x7f0000000f00)={{0x12, 0x1, 0x300, 0xfb, 0x18, 0x68, 0xff, 0x499, 0x1045, 0xef8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x0, 0x7f, 0x0, 0xd, [{{0x9, 0x4, 0x96, 0xd0, 0x1, 0x32, 0xfd, 0x50, 0xfd, [@hid_hid={0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0xf0b}}], [{{0x9, 0x5, 0xc, 0xc, 0x197, 0x80, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7}, @generic={0x7e, 0x3, "be94d9bbf8b1f07c0a26b7b1d71b82b4af563834b1fffd381226ead32db3f26729d39e3caa4281dee6112787abf8e82ed5eeb729434cbc1ddec4a8db92edf94bda8f2c864b923100c69cccc301c95129def596d75fc2695f64431bce182e4d9967d384fef766bea838c75191dfd74a252d02c97a6b0acbd1eeb51ea4"}]}}]}}]}}]}}, &(0x7f0000001340)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x300, 0xd6, 0xe6, 0x21, 0x8, 0x2}, 0xf, &(0x7f0000001000)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1e, 0x0, 0xbf9}]}, 0x7, [{0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x413}}, {0x19, &(0x7f0000001080)=@string={0x19, 0x3, "83f6c320be797527329203fb82f7d0c3626283f7d72afd"}}, {0x98, &(0x7f00000010c0)=@string={0x98, 0x3, "9fdb6fde62802b2435fbcabde8ee746c3c04ecddd7ceef1689697dec17b5fe85f2f3bdf0b070caf166ae29230610d342cef040108b4deeb5061ec94b46ba6aca38ed5f0fe056316c42f50b144e15dc5f433183a7e31b161f85b3b017a6a5eadfba23206b1995bfb0abd2126febed194b86781d88b1a991b04f8328b5cea365d7254d300750ae788d93a2a57764dbbc48b39e91bf7a92"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x40d}}, {0xdb, &(0x7f00000011c0)=@string={0xdb, 0x3, "5b295645c6145546685f1bbb225940c8f4ddd9adc7a4820b90256308e4d597c83e1f50f9aae7dc85c6e072f08dd75e495223b94e584a4af0b11ebc53677d3f672197813dc2b5749834ad406f8c3af09ec032512fbff3703eab50acc8d4b79538294be086db7ea1689bda08d551f3b456ad2b0cd614d32f9ef96723296fa2dd27275e20e58275252d548cb72da87fbdadd39d8893f0409d7441b56ce7779dbe4f5b2ebcf6aad2f97bf4949bc4a74deb714159872d4bdd7b850b9c846a95e922ddd26b7feca2aff0da7e65a093b0cca190913fa31fc8ecf7e45c"}}, {0x2c, &(0x7f00000012c0)=@string={0x2c, 0x3, "041fb42c10f0da7c30edf9c5aa94b5b48c5ed0451835259d2fb7d6ee629443a06423458b8a0b55219b43"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x439}}]}) 1.979067912s ago: executing program 1 (id=286): socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc6, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "34d181ed"}]}}, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(r3, &(0x7f0000000a00)={0x2c, &(0x7f0000000140)={0x0, 0x4, 0x2d, {0x2d, 0x7, "c87bf9b1b5f8c22336268dfdfb84abff82ac765ce4de974413bcf6640f5427f7a0398fc9a352ebae28fadd"}}, &(0x7f0000000480)={0x0, 0x3, 0xa, @string={0xa, 0x3, "403510cb162baf15"}}, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x1, 0x4, 0x26, "0a2d8ca0", "d8153706"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0xc, 0x2, 0x1, 0xfffd, 0x2}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a80)={0x0, 0x10, 0x1, "b4"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x6}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x160, 0x20}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "4cdb"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x210d}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "5d8b"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x81}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r8) sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000f40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="e34b28bd70000800000010000000499073d4bfe5c3a1023222053fe72bb10d9ab732b08155775ead078bdf39022bdf95b37525735a8038b53342c599f2d9c32c4200113c407c455d5b290d19aa61949e8df6182f3f79300e9b96b87433eded5c95c2405db3a7e3a0ab3eca116ec1516bf59d308f184f6624f94741af794cb4a3145ed8e8e51c44ee3a97809743924539dac6a257fe9a683f935aba18e039c93635125d84518514b1f80c584dbb6070b444010f504d402e0a1fe29b0963f7209a4cc353f00f254892d29306d62a31945fe7369ca73279d4b84127a822"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.593212079s ago: executing program 2 (id=287): bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x100, 0x4, 0x20, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r7}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x58, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x287438af4a18ea5e}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4008004) r10 = open$dir(&(0x7f0000000200)='./file0\x00', 0x20000, 0x1a1) unlinkat(r10, &(0x7f0000000240)='./file0\x00', 0x200) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r8}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000007c0)={0x12b4, 0x1, 0x5, 0x0, 0x0, 0x0, {0x1, 0x0, 0x2}, [{{0x254, 0x1, {{0x3, 0x9}, 0x80, 0x4, 0x1, 0x7, 0x16, 'syz0\x00', "23c185bb5f79bb91b887c9e3fbf4eb3d9ec0d55b4b78770317f85ed3a53d852b", "703d003508b98c4e9bae618116b0fc3469ea51ea14c8e855ad8b198273e5bb36", [{0x66e1, 0x5, {0x3, 0xfffff1f9}}, {0x80, 0x1, {0x5b761a6b5bdfa844}}, {0xf006, 0xd, {0x0, 0x5}}, {0x7, 0x200, {0x2, 0x3}}, {0x6, 0x0, {0x1, 0x4}}, {0x4, 0x0, {0x2, 0x9}}, {0x8000, 0xaf, {0x0, 0x14dad530}}, {0x1, 0x2, {0x2}}, {0x7, 0x5, {0x2, 0x3}}, {0x6, 0x0, {0x1, 0x1ff}}, {0x7, 0x5, {0x2, 0x7}}, {0x0, 0x7fff, {0x3, 0x4}}, {0x101, 0x96b, {0x1}}, {0xd, 0x8, {0x0, 0x1}}, {0x4, 0xff90, {0x2, 0x1}}, {0x7, 0xd, {0x3, 0x1}}, {0x1ff, 0x3, {0x1, 0x3}}, {0x3, 0x10, {0x2, 0xb9d2}}, {0x7, 0x0, {0x2, 0x5}}, {0x1, 0x8, {0x3, 0x7}}, {0x4, 0x3, {0x3, 0x3}}, {0xff, 0x9, {0x2, 0xffffffc0}}, {0x280, 0x0, {0x2, 0x2}}, {0xdc, 0x470, {0x2, 0x6}}, {0xfff3, 0x7, {0x2, 0xff}}, {0x19, 0x0, {0x0, 0x200}}, {0x71a, 0x7, {0x2, 0xfffffff7}}, {0x7, 0x1, {0x3, 0x5}}, {0x9, 0x8, {0x2, 0xdfa9}}, {0x54b9, 0x5, {0x2, 0xfffffffb}}, {0x3, 0x1, {0x0, 0x4}}, {0x9, 0x3, {0x1, 0x1}}, {0xc85, 0x1c8, {0x3, 0x4}}, {0x1, 0x40, {0x3, 0x39}}, {0x2, 0x3, {0x3, 0x266}}, {0x6, 0xffff, {0x0, 0x4}}, {0x2, 0x5, {0x0, 0x37}}, {0x4, 0x40, {0x2, 0x7917}}, {0x8001, 0x9, {0x0, 0x1}}, {0x1000, 0x3, {0x2, 0x500b}}]}}}, {{0x254, 0x1, {{0x2, 0x400}, 0x7, 0x4, 0xfe00, 0xff, 0xe, 'syz1\x00', "d1d242dcd5786c8337ea61c3d00abe0cf701ded7f39287d67a28b73c0bf552d9", "7ad9827b144ff3bbae7e3d54c6b745c110a7df413ca6ee80a5e31c0af4eb27c3", [{0x568, 0x8001, {0x3, 0x2}}, {0x8, 0x3, {0x2, 0x586}}, {0x9, 0x2, {0x1, 0x2}}, {0x100, 0x261d, {0x0, 0xfffffffe}}, {0x6c, 0x8000, {0x1, 0x3ff}}, {0x2, 0x5, {0x2, 0x7}}, {0x3, 0x8, {0x3, 0x4}}, {0x1, 0x4, {0x3}}, {0xe1, 0x1, {0x2, 0x6}}, {0xf1d2, 0x8001, {0x0, 0x4}}, {0x7, 0x8, {0x0, 0x1}}, {0xa8, 0xf, {0x1, 0xfffffff8}}, {0xfff7, 0x531, {0x1, 0x3ff}}, {0x15a, 0x2000, {0x3, 0x2}}, {0x5, 0x7, {0x2, 0x9}}, {0x6, 0x2, {0x1, 0x200}}, {0x1, 0x0, {0x1, 0x7}}, {0x9, 0x2, {0x3}}, {0x7, 0x5dfb, {0x2, 0x9}}, {0xb7a, 0x0, {0x0, 0x9}}, {0x1, 0x2, {0x0, 0x53c}}, {0xb8d, 0x6, {0x17a7d601bca8cd4a, 0xffff}}, {0xd, 0x5, {0x0, 0x9}}, {0x100, 0x4, {0x3, 0xb}}, {0x5, 0x8001, {0x3, 0x3}}, {0x7, 0x1000, {0x2, 0xffffffff}}, {0x9, 0x78af, {0x3, 0x8}}, {0x70cf, 0x60, {0x1, 0x40}}, {0x7, 0x80, {0x0, 0x3}}, {0x800, 0x883, {0x0, 0x3}}, {0x0, 0xffff, {0x3, 0x6}}, {0x1ff, 0xb, {0x2}}, {0x10, 0x6d7, {0x0, 0x200}}, {0x7, 0x100, {0x3, 0xa000}}, {0x7, 0xff}, {0x2, 0x3, {0x2, 0x9d}}, {0x2, 0x0, {0x3, 0x1}}, {0xfffb, 0x6, {0x3, 0x3}}, {0x137b, 0xff77, {0x1, 0xffffffff}}, {0xd6, 0x8, {0x1, 0xc}}]}}}, {{0x254, 0x1, {{0x1, 0x4ea693a3}, 0x8, 0xa, 0x2, 0x1c, 0x1e, 'syz1\x00', "29bc8044132b88f3099bc1689377f656e8f5cbc0f259c9b68eaa155edb45d6a4", "200ec11f6d5b955ccf831a05c0b4635fcb912e6e08a6a53af217093ad634dc55", [{0x4, 0x1, {0x3, 0xffffff79}}, {0x6, 0x5, {0x3, 0x8}}, {0x9, 0x5, {0x1, 0x2}}, {0x10, 0x0, {0x1, 0xb4}}, {0x9, 0xa, {0x0, 0x9}}, {0x9, 0x9, {0x2, 0x1}}, {0x7, 0x8, {0x1, 0xe}}, {0x0, 0x400, {0x1, 0x9}}, {0x8000, 0xb, {0x1, 0x4}}, {0x5, 0x3, {0x2}}, {0x4d40, 0xea6e}, {0xfd3, 0x5, {0x0, 0x2}}, {0x2, 0x8, {0x0, 0x7}}, {0xd, 0x8001, {0x3, 0x76}}, {0x1, 0x7, {0x1, 0xec}}, {0x0, 0x9, {0x2, 0x3}}, {0x8001, 0x1, {0x1, 0x6}}, {0xffff, 0x2, {0x0, 0x2}}, {0x2, 0x0, {0x0, 0xa9}}, {0x81, 0x7, {0x1, 0xcd4}}, {0x7fff, 0x4, {0x2, 0x5}}, {0x5b8c, 0x30, {0x3, 0x7}}, {0x1ff, 0xb11, {0x0, 0x1}}, {0x6, 0x101, {0x0, 0x3}}, {0xb, 0x2, {0x0, 0xffffffff}}, {0xb, 0xbcc1, {0x2, 0x1000}}, {0x6be6, 0x7, {0x2, 0x8}}, {0x4, 0x7fff, {0x3, 0xbe7}}, {0xff, 0x3fa, {0x0, 0x8}}, {0xc6a, 0x8, {0x3, 0x2}}, {0x12d, 0x8, {0x0, 0x3}}, {0x6, 0x5, {0x3}}, {0x3, 0x8, {0x1, 0x7}}, {0x0, 0x2, {0x2, 0xeb3f}}, {0x4, 0x6, {0x1, 0x6}}, {0x0, 0x1, {0x3, 0xfffffff8}}, {0x1, 0x8, {0x1}}, {0x2, 0xfff, {0x3, 0x9}}, {0x8, 0x3, {0x2, 0x9}}, {0x7, 0xe37f, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x81, 0xa, 0x7, 0x9, 0x24, 'syz1\x00', "f830752076365edbbabc8fe38233538d949bd0e1c31dc85673425a5ba3dc8250", "2dd36007f937055698ecddf52d01864233f3b42e3e9dd062f0cadefe1438d590", [{0x7, 0x2, {0x3, 0x10000}}, {0x100, 0xfff7, {0x2, 0x7}}, {0x1, 0x3, {0x0, 0x5}}, {0x7, 0x80e, {0x2, 0x3dc4}}, {0x1, 0x1, {0x2, 0x1}}, {0x8001, 0x8, {0x2, 0x8}}, {0x0, 0xa999, {0x3, 0xfff}}, {0x8, 0x200, {0x1, 0xfff}}, {0x3, 0xffff, {0x1, 0x683b}}, {0x481, 0xbb, {0x1, 0xc}}, {0x3, 0x7fff, {0x3, 0x3}}, {0x9, 0xc, {0x2, 0x7}}, {0x1, 0x1}, {0x0, 0x3, {0x3, 0x7}}, {0x2, 0x4, {0x1, 0xd}}, {0x5, 0x9, {0x2, 0xc}}, {0xe, 0x9, {0x2, 0xfffffff9}}, {0x5, 0x7fff, {0x3, 0x1000}}, {0xb, 0x1}, {0x1, 0xfff7, {0x1, 0x9}}, {0x0, 0x40, {0x3, 0x7fff}}, {0x2, 0xfe00, {0x1, 0xf4}}, {0x51, 0x3, {0x2, 0x7}}, {0x7f, 0x7, {0x0, 0x8}}, {0x7, 0xb7d3, {0x0, 0x6}}, {0x7f, 0x79, {0x1, 0x3}}, {0x1, 0x4, {0x3}}, {0x80, 0x1, {0x2, 0xf}}, {0x2, 0x1, {0x1, 0x2}}, {0x10, 0x6, {0x0, 0x101}}, {0x5, 0x6, {0x2}}, {0xcb59, 0x9, {0x1, 0x71}}, {0xba, 0x7ff, {0x3, 0x6}}, {0x7, 0x2c1, {0x0, 0x1}}, {0x99dd, 0x4, {0x2, 0x5}}, {0x100, 0xe}, {0x101, 0x3, {0x1, 0x8}}, {0x7, 0xe3, {0x2, 0x1ff}}, {0x9157, 0x6, {0x0, 0x1}}, {0x8, 0xe, {0x2, 0xa16}}]}}}, {{0x254, 0x1, {{0x1, 0xfffffffa}, 0x9, 0x30, 0xfff8, 0x8, 0x8, 'syz1\x00', "b067f37a65221703a8b596295d553462f7f3b5cd0bc09aa198804c38c4e0c443", "dac8e98db3afef71ab796fffb6509f5c3578ea8fbd769a0197eac0dc15fac4bf", [{0xf, 0x7ff1, {0x2, 0x3}}, {0x4, 0x2, {0x2, 0x6}}, {0x0, 0x9, {0x1, 0xfff}}, {0xca, 0xffff, {0x3, 0x80}}, {0x401, 0x200, {0x3, 0x9}}, {0x0, 0x5, {0x1, 0x8b8}}, {0x1, 0xbf9b, {0x3, 0x1}}, {0x6a, 0x4, {0x2, 0x9}}, {0x9, 0x3, {0x2, 0x1e3c}}, {0x25e, 0xca4, {0x0, 0x6}}, {0x4, 0x1400, {0x1, 0x6}}, {0x36b, 0xa45f, {0x3, 0x5}}, {0xd, 0x4, {0x1, 0x1e2}}, {0x8000, 0xff44, {0x2, 0x6}}, {0x4, 0x1578, {0x3, 0x80}}, {0x4, 0x3, {0x3, 0xd19}}, {0x8, 0x8, {0x3}}, {0x3, 0x2, {0x0, 0xfffffffa}}, {0x3, 0xf, {0x0, 0x8}}, {0x100, 0x3fe4, {0x3, 0x200}}, {0x6f, 0xdefc, {0x3, 0x8}}, {0x7ff, 0x3, {0x0, 0x10000}}, {0x2761, 0x9, {0x3, 0x7fffffff}}, {0x800, 0x7, {0x0, 0x9}}, {0x81, 0x8000, {0x1, 0x8}}, {0x638a, 0xe, {0x2, 0xf}}, {0x2, 0xf, {0x2, 0x5}}, {0x101, 0x800, {0x2, 0x7}}, {0x2, 0x5, {0x0, 0x8}}, {0x2, 0x80, {0x3}}, {0x9, 0x200, {0x1, 0x4}}, {0x8, 0x6, {0x0, 0x34000}}, {0x0, 0x8, {0x0, 0x2}}, {0x0, 0x3, {0x3, 0x4}}, {0x5, 0x2, {0x0, 0x4d}}, {0xfc2, 0x0, {0x2, 0xa}}, {0x7fff, 0x1, {0x3, 0x5}}, {0x101, 0x4, {0x0, 0xe242}}, {0x4, 0xbd5b, {0x0, 0x40}}, {0x0, 0x8, {0x0, 0x1000}}]}}}, {{0x254, 0x1, {{0x3, 0x9}, 0x4, 0x1, 0x6e, 0x402c, 0x0, 'syz0\x00', "008242d1d6bf8295d1d15801e4ca62093a2876e3d346c1671e094733346a4374", "77f4b2898c988da3a3e62de4ebbc17362c2e2a870958afb462ef49c478b1fa48", [{0x4, 0x7, {0x2, 0x70000}}, {0x9, 0x10, {0x0, 0x476}}, {0x9, 0x9, {0x0, 0xffffffff}}, {0x1, 0xfffb, {0x3, 0x3}}, {0x81, 0xa, {0x2, 0x8}}, {0x3, 0xe, {0x3, 0x89}}, {0x400, 0x1, {0x2, 0x5}}, {0x3ff, 0xb, {0x2, 0x1ec7}}, {0x5d8, 0x7, {0x2, 0x27}}, {0x2, 0x8000, {0x1, 0xfffffffb}}, {0x4, 0x6, {0x3, 0x1}}, {0x5, 0x2, {0x3, 0x6}}, {0x1, 0xfffd, {0x2, 0x90}}, {0x6, 0x0, {0x1, 0x3dfa}}, {0xeb, 0x6, {0x1, 0xb9}}, {0x401, 0x1ff, {0x2, 0x22a3}}, {0x1c, 0x6, {0x1, 0x10000}}, {0x2, 0x1ff, {0x0, 0x8}}, {0x7, 0x401, {0x3, 0x8dcb}}, {0xfffd, 0x5, {0x0, 0x7}}, {0x6, 0x2, {0x0, 0xc799}}, {0x4, 0x400, {0x0, 0x5}}, {0x5, 0x2, {0x0, 0x6}}, {0x4a, 0xf0, {0x3, 0x9}}, {0x1, 0xe, {0x1, 0x8735}}, {0x800, 0x1ff, {0x1, 0x8}}, {0x100, 0x1, {0x0, 0x4}}, {0x7ff, 0x5, {0x0, 0x3ff}}, {0x3, 0x5, {0x1, 0xfffff3ba}}, {0xf7, 0x4fe9, {0x2, 0x80000000}}, {0x6, 0x1, {0x3, 0x5db}}, {0x73, 0x5, {0x1, 0x8}}, {0x3, 0x5, {0x2, 0x8}}, {0x8, 0xffdc, {0x1, 0x2}}, {0x380, 0xc3, {0x2, 0x6}}, {0x5, 0xfff5, {0x3, 0x7}}, {0x7, 0x3000, {0x1, 0xd0b9}}, {0x5, 0x7, {0x0, 0xb}}, {0x5, 0x1, {0x2, 0x40}}, {0x4, 0xf11, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x3, 0x1, 0x6, 0x7, 0x20, 'syz0\x00', "e4da7c7188315aa68395a668c1739cd44a27822f02c6cc13154b8798b1993a87", "abf90594fadd8f186f60174660fa0657f2d2a4766776c961014ea38af25367aa", [{0x5, 0x65d, {0x0, 0xfffffffc}}, {0x4, 0xf, {0x0, 0xc77}}, {0x2, 0xfff, {0x3, 0x7}}, {0x10, 0xfffc, {0x2, 0x573b0a2e}}, {0x8, 0xb56, {0x1}}, {0x7352, 0x7, {0x3, 0x4}}, {0x4, 0xc46, {0x0, 0x77}}, {0x0, 0x5dc6, {0x1, 0x11ebb5a8}}, {0x3, 0x4, {0x3, 0x1}}, {0xd7, 0x4, {0x0, 0x3}}, {0x9b, 0x2, {0x2, 0x10001}}, {0x53c7, 0xa, {0x1, 0xa1}}, {0x3, 0x5, {0x0, 0x7}}, {0x9, 0x1ff, {0x2, 0x7}}, {0xe50, 0x0, {0x3, 0x1}}, {0x9, 0x1, {0x2, 0x1}}, {0x1, 0x0, {0x3, 0x3}}, {0xa, 0x2, {0x3, 0x200}}, {0x7, 0x9, {0x3, 0x34}}, {0x6, 0x2, {0x2, 0xfff}}, {0x6, 0x5, {0x2, 0x7}}, {0xfffa, 0x6, {0x3, 0x8}}, {0x200, 0xf26, {0x1}}, {0x7, 0x200}, {0x2, 0x5, {0x2, 0xff}}, {0x400, 0xc, {0x1, 0x200}}, {0xffc0, 0x47, {0x1, 0x3}}, {0x0, 0x9, {0x3, 0x1}}, {0x100, 0x7, {0x1, 0x7}}, {0x3, 0xcd, {0x0, 0x3ff}}, {0x9cb, 0x6990, {0xa215d43e7c59f864, 0x80000000}}, {0x3, 0x2, {0x0, 0x4}}, {0x4, 0x5, {0x1, 0x5}}, {0x8, 0x3, {0x1, 0x5}}, {0x7, 0x0, {0x2, 0x50000000}}, {0x5, 0x0, {0x1, 0x2}}, {0x2, 0x9, {0x0, 0x8dbf}}, {0xb, 0x4, {0x0, 0x5}}, {0xff, 0x6}, {0x1, 0x3, {0x0, 0x9f}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0x3, 0x40, 0x50, 0xffff, 0x21, 'syz1\x00', "c8da7b03695705d53433eb9462093aafe66eaeeda84830eda6213672b299c5e4", "1e2bdd7a4092cad75b3ec71430cf8c0df468774deb6aa51f440e6384dd4784f4", [{0xfffd, 0x6, {0x2, 0x6}}, {0x4, 0xfffc, {0x0, 0x4}}, {0x1, 0x6, {0x0, 0x10000}}, {0x6, 0x7ff, {0x3, 0x3}}, {0x3, 0x7f, {0x1, 0x8000}}, {0x3, 0x0, {0x2, 0xa4}}, {0x0, 0x100, {0x1, 0xe}}, {0x44f, 0x6, {0x2, 0x9}}, {0xb1, 0x3af9, {0x3, 0x80}}, {0x30, 0x6, {0x2, 0x9}}, {0x4, 0x7, {0x2}}, {0x3, 0x3, {0x2, 0x5}}, {0x2, 0xfffb, {0x0, 0x7}}, {0x0, 0x8, {0x3, 0x6}}, {0x5, 0x2, {0x3, 0x4}}, {0x3, 0x8, {0x0, 0x4}}, {0x9, 0x1000, {0x2, 0x1}}, {0x8, 0x4, {0x0, 0x8}}, {0x7f, 0x8, {0x1, 0xf163}}, {0xb4, 0x101, {0x0, 0xf2}}, {0xdbe, 0x80, {0x2, 0x3}}, {0x3, 0x0, {0x2, 0x5}}, {0xd, 0x1ff, {0x1, 0x8}}, {0x2, 0xfff6, {0x0, 0x9}}, {0x2, 0xd, {0x1, 0x4}}, {0x1, 0xffff, {0x0, 0x1}}, {0xb5, 0x30, {0x3, 0x7}}, {0x4, 0x1, {0x1, 0x10}}, {0x5, 0x100, {0x0, 0xffffff00}}, {0x0, 0x5, {0x3, 0x4}}, {0x6, 0x101, {0x0, 0x4}}, {0x9, 0x5, {0x0, 0xff800}}, {0x3, 0xfff7, {0x1, 0x800}}, {0x0, 0x2, {0x0, 0x5}}, {0x2, 0x9, {0x2, 0x30}}, {0x1, 0x5, {0x0, 0x7fffffff}}, {0x6, 0xe, {0x2, 0x3}}, {0xfffe, 0x0, {0x3c4ea971d5077bd4, 0x8}}, {0x2, 0x8000, {0x3}}, {0x6, 0x9244, {0x0, 0x3ff}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x24004045}, 0x0) (async) sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007840)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="180100001c0001000000000000ebffff020100801400030010000100000000f35e000000000000000c000200050000000000000008"], 0x118}], 0x1}, 0x0) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.499011511s ago: executing program 2 (id=288): lsetxattr$trusted_overlay_origin(&(0x7f0000002340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000000), &(0x7f00000023c0), 0x2, 0x3) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_clone3(&(0x7f00000026c0)={0xa000, &(0x7f0000002400), &(0x7f0000002440)=0x0, &(0x7f0000002480), {0x40}, &(0x7f00000024c0)=""/163, 0xa3, &(0x7f0000002580)=""/246, &(0x7f0000002680)=[r0, r0, r0, r0], 0x4}, 0x58) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000002840)={&(0x7f0000002740)="5cc219f5d97e3cf0a7d323e81bb6041914cadf5a88d3b779313d5b050bbf8a9dd6e56a0b0d88967fff41894f1f937c1dc76965d8f90b24bcb4c2278cc2a56b77783ef1a1ac05bef03130a2dbfbad66d7882363892164dfd415cdf5721fc7d991f2fe0582a9f9844f7a7ba6545bb704c344a7e9a2396816d8e5f419e1009259972c8a6668cdd506413d7574cc408dbe2de052ab1e8246ab1d63f866c78b71e4aab40ef36788006246b01d191b9571c1dff0b63d58859cbdad1b6b369a043ac0a95a563e42bf406cfd3862c517ec04f4cbdd7414814e80811a61add43d889d1aeb01da12589e2a56f8f5a11471c401c38fab078370bd06", 0xf6}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002900)={'team0\x00', 0x0}) pipe(&(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002980)=@bloom_filter={0x1e, 0x7, 0x0, 0x6, 0x78001, r5, 0xffffffff, '\x00', r4, r5, 0x2, 0x2, 0x2, 0x0, @value=r6, @void, @value=r6}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3e}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000000280)={0x2020}, 0x2020) 808.511384ms ago: executing program 4 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757815"], 0x65) 643.260478ms ago: executing program 0 (id=290): bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r0}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 642.646788ms ago: executing program 2 (id=291): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000100000000000000"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000100000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x109000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 180.412677ms ago: executing program 0 (id=292): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a00)="dbca755a2257a217bff447059e27f342d6a13890c6a39e475e29d860d3c3d2e58baa1b4f1568a87a9a99567282e3146dbe0076f226c1a0659b7b9b251ef382a439fe6cf5678f8fde8e552b96770c9d4b75d96edd3b2b1972ab6cb49d15fe7f4a6ec129aba9b9ff8018fc4a5a44b5c9b80b71c48cbe91f2f02f6f6f43a56f2f5d732173c326d4933b7a5f8ef9551d822eeae9f26f456315dced283ce53214c53fdc6e8136bd21a9fb73d6372734c7b5d40ef2cb340e1819e085fbe1c6ae6d3c3a3546e4094897014b79024de853414cdb601907a7b4f200"/230, 0x0, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e80)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) fcntl$dupfd(r3, 0x406, r2) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x59, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x36028003}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c00000e0a0fe2d455e77e86ffe5772772a582a772e43db905fdbda3df8f858eb32efaeaaebea784c9e6b74592e2343322e307eb2bbb75b0000000007cc86d", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf25040000000500050009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32], 0x48) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r7, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() openat$cgroup_procs(r10, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 11.06166ms ago: executing program 3 (id=293): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000004c0)={0x0, 0xfffffffffffffdb8, &(0x7f0000000400)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x40) 9.26945ms ago: executing program 0 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080)={[{@barrier}, {@noblock_validity}, {@mblk_io_submit}, {@data_err_ignore}, {@errors_remount}, {@inlinecrypt}]}, 0x6, 0x615, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZp0uZ90768ii2KAQ8tSNOkFqtebOvBHgoW7EHEQ0OT1NDtD5oUbC2YggcFBRGvIr34D3iX4tWbCOrNs1BFKgoqXZnd2XST7CZrmt1NMp8PbHaeZ2b3eb47efI8M5NnJ4DCGs1+pBF7I+6fTSJGGtYNR23laL7dvV8r+ZpK5dVfkkiqeTfP1bdP8uddeWIwIr45EfG/0spy567fuDBZrtS8E3Fo/uKVQ3PXbxycvTh5fvr89KWJw88dOTr+/MSRiQ2Jc1f+fPLUK49/+O6bz858Wz6YxLE40//2VCyLY6OMxmjcz0NszO+LiKPZQpPPZavZBiEUWin/feyPiEdjJErVVM1IzH7Q08oBHVUpZb15Wwbb3RDYKpJ1NusdG10RoMvq44Ds+Lf+WHvUcKbDo5LuuXu8dgC0Mv6+2rmRGKweG+28lzQcGdXObezegPKzMv6+ue/T7BFLzkP8sbh3+jagnFYWbkXEY83iT6p1212NNIs/XVKPJCLGI2Igr99LD1GHpGG5E+dhVrPe+NOIOJY/Z/kn1ln+6LJ0t+MHoJjuHM878oUstdj/fRWLfVO9/1s6/hlu0netR6/7v9bjv3p/P1g9R54uG4dlY5bTzd+yf3nGj++f/LhV+Y3jv+yRlV8fC3bD3VsR+5bF/14WbD7+yeJPmuz/bJOzx9or4+Xvfj7Zal2v46/cjtjf9Pjnwag0W1rl+uShmdny9HjtZ9Myvvz6jc9bld/r+LP9v7NF/A37P13+uuwzudJmGV+cvn2x1brhNeNPfxpIasebA3nOW5Pz81cnIgaSU/kmDfmHV69LfZv6e2TxH3iqeftf8vt/a+n7DNX/ZLbhymsX7rVat57933Ax+X6lzTq0ksU/tfb+X9H+s7yP2izj99evPdFq3WrxDz1MYAAAAAAAAFBAafUabJKOLS6n6dhYbb7s/2NnWr48N//0zOVrl6YiDlT/H7I/rV/pHqmlkyw9kf8/bD19eFn6mYjYExGflIaq6bFzl8tTvQ4eAAAAAAAAAAAAAAAAAAAANold+fz/+n2qfyvV5v8DBdHJG8wBm5v2D8VVbf8rbvEEFIH+H4pL+4fi0v6huLR/KC7tH4pL+4fi0v6huLR/AAAAANiW9jx554ckIhZeGKo+MgP5OjOCYHvr73UFgJ4p9boCQM8sXvo32IfCaWv8/2f+5YCdrw7QA0mzzOrgoLJ647/T9JUAAAAAAAAAAAAAQAfs39t6/r+5wbC9mfYHxfUQ8/99dQBscb76H4rLMT6w1iz+wVYrzP8HAAAAAAAAAAAAgK4Zrj6SdCyfCzwcaTo2FvGfiNgd/cnMbHl6PCL+GxHfl/p3ZOmJXlcaAAAAAAAAAAAAAAAAAAAAtpm56zcuTJbL01cbF/5akbP5FkprbfNItP2G9bugdqHyL8a/fFUk3f94hyJic+zlTiz0NeQkEQvZnt8UFbs6F5ujGtWFHv9hAgAAAAAAAAAAAAAAAACAAmqYe9zcvs+6XCMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6L4H9//v3EKvYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtqZ/AgAA//9ffTgl") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000340)={[{@test_dummy_encryption}, {@i_version}, {@quota}, {@commit={'commit', 0x3d, 0x5}}, {@oldalloc}, {@oldalloc}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@resgid}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000f000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000891}, 0x0) 0s ago: executing program 3 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x255, 0x0, 0x7}, {0x386, 0x0, 0x8}]}) r1 = socket(0x23, 0x4, 0x7fff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = syz_open_pts(0xffffffffffffffff, 0x620080) ioctl$TCGETA(r4, 0x5405, &(0x7f00000001c0)) r5 = open$dir(&(0x7f0000000200)='./file1\x00', 0x101042, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2, 0x18) renameat2(r5, &(0x7f0000000240)='\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x3) r7 = syz_open_dev$evdev(&(0x7f0000000300), 0x30f, 0x8080) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f0000000340)=""/107) r8 = request_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='$\x00', 0xfffffffffffffffc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000480)={@desc={0x1, 0x0, @desc2}, 0x40, r8, '\x00', @a}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000580)={0x0, @dev, @private}, &(0x7f00000005c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xe}, {0xffff, 0xfff1}, {0xe, 0xfff1}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x20040000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f00000006c0)) r10 = syz_open_dev$mouse(&(0x7f0000000700), 0x0, 0x10000) ioctl$VHOST_VDPA_SET_CONFIG(r10, 0x4008af74, &(0x7f0000000740)={0x99, 0xa2, "09000ffcdd6e2ae4dd38e87c2bce65f7de41e82a5380ca204d45a8436043d7831e1b12f2a531e296cb309c9ad363df6eaf4e1a80c0d878b05b8bdd659168e0c4114f1e72d0678b7fe4ae34212c8eec51069b6f5d3632655e86e9f65b71434cea38a35a3223dbcdf213337d4d0af0b619c205500bde5350a0d1b906beb859c4bbe01cc46ba39cba087d3650b72782d69eded47862d1905af509af77077cbaaa2fb1c0"}) add_key(&(0x7f0000000800)='id_resolver\x00', &(0x7f0000000840)={'syz', 0x1}, &(0x7f0000000880)="4452968546e07e7cca8489469be5a8393d3da42c9786ea6af46a6f6cb6a54240086e2b62c73d3bc943", 0x29, r8) r11 = accept4$inet(r2, &(0x7f00000008c0)={0x2, 0x0, @remote}, &(0x7f0000000900)=0x10, 0x800) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000940)={'pim6reg0\x00'}) quotactl$Q_SETQUOTA(0x0, &(0x7f0000000980)=@sr0, r3, &(0x7f00000009c0)={0x8, 0x6, 0x80000000, 0x0, 0x8001, 0x8, 0x5, 0x3ff, 0x3}) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b8, 0x268, 0xf8, 0xffffffff, 0x0, 0xf8, 0x320, 0x320, 0xffffffff, 0x320, 0x320, 0x5, &(0x7f0000000a40), {[{{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x0, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x18, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @gre_key=0x9f, @gre_key=0x4}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @local, @local, @gre_key=0x2, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x2fd, 0x82], 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x8}}}, {{@ip={@multicast1, @local, 0xffffff00, 0xff, 'geneve1\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x89, 0x2, 0x10}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4=@local, @port=0x4e24, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@bloom_filter={0x1e, 0x4, 0xce, 0x100, 0x1000, 0xffffffffffffffff, 0x8, '\x00', r9, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x3}, 0x50) lsetxattr$trusted_overlay_redirect(&(0x7f0000000f80)='./file1\x00', &(0x7f0000000fc0), &(0x7f0000001000)='./file0\x00', 0x8, 0x2) ioctl$LOOP_SET_FD(r10, 0x4c00, r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 22.410763][ T24] audit: type=1400 audit(1757595941.120:64): avc: denied { mounton } for pid=267 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.412145][ T267] cgroup: Unknown subsys name 'net' [ 22.433465][ T24] audit: type=1400 audit(1757595941.120:65): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.460897][ T24] audit: type=1400 audit(1757595941.150:66): avc: denied { unmount } for pid=267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.461116][ T267] cgroup: Unknown subsys name 'devices' [ 22.571891][ T267] cgroup: Unknown subsys name 'hugetlb' [ 22.577553][ T267] cgroup: Unknown subsys name 'rlimit' [ 22.749193][ T24] audit: type=1400 audit(1757595941.450:67): avc: denied { setattr } for pid=267 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.772740][ T24] audit: type=1400 audit(1757595941.450:68): avc: denied { mounton } for pid=267 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.797766][ T24] audit: type=1400 audit(1757595941.450:69): avc: denied { mount } for pid=267 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.807545][ T269] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.829948][ T24] audit: type=1400 audit(1757595941.530:70): avc: denied { relabelto } for pid=269 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.855405][ T24] audit: type=1400 audit(1757595941.540:71): avc: denied { write } for pid=269 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.895855][ T24] audit: type=1400 audit(1757595941.600:72): avc: denied { read } for pid=267 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.921554][ T24] audit: type=1400 audit(1757595941.600:73): avc: denied { open } for pid=267 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.947884][ T267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.958815][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.965947][ T275] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.973749][ T275] device bridge_slave_0 entered promiscuous mode [ 23.981896][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.989148][ T275] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.996764][ T275] device bridge_slave_1 entered promiscuous mode [ 24.098800][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.106161][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.113720][ T279] device bridge_slave_0 entered promiscuous mode [ 24.122587][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.129754][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.137800][ T279] device bridge_slave_1 entered promiscuous mode [ 24.154263][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.161464][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.169063][ T280] device bridge_slave_0 entered promiscuous mode [ 24.176971][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.185053][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.193161][ T280] device bridge_slave_1 entered promiscuous mode [ 24.217545][ T276] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.224710][ T276] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.232205][ T276] device bridge_slave_0 entered promiscuous mode [ 24.253721][ T276] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.260936][ T276] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.268439][ T276] device bridge_slave_1 entered promiscuous mode [ 24.342111][ T275] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.349195][ T275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.356725][ T275] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.363778][ T275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.373007][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.380118][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.387446][ T282] device bridge_slave_0 entered promiscuous mode [ 24.394557][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.402176][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.409578][ T282] device bridge_slave_1 entered promiscuous mode [ 24.455598][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.462685][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.469972][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.477044][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.513303][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.520511][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.527857][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.535007][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.567938][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.575030][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.582323][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.589439][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.603965][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.611843][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.619154][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.627026][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.634271][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.641603][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.649053][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.656876][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.664217][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.685554][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.693386][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.701445][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.709710][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.716776][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.728665][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.737080][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.744159][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.762896][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.771013][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.779191][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.786256][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.793912][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.802373][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.809907][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.817642][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.825898][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.832948][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.844457][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.872750][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.881475][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.889125][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.898113][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.905205][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.913111][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.921541][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.929437][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.937633][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.944835][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.952347][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.960529][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.967558][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.975120][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.983415][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.003330][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.011790][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.021114][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.029720][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.038318][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.045672][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.053469][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.062465][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.070730][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.077759][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.085266][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.093700][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.101702][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.109706][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.117738][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.125923][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.145737][ T276] device veth0_vlan entered promiscuous mode [ 25.152507][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.161591][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.170746][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.178620][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.187065][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.194725][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.203910][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.212683][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.227921][ T279] device veth0_vlan entered promiscuous mode [ 25.239365][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.247956][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.256550][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.265089][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.273647][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.282234][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.290818][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.299086][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.307297][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.315317][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.328175][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.336428][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.344503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.353133][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.361605][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.369621][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.378059][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.385907][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.395493][ T279] device veth1_macvtap entered promiscuous mode [ 25.405404][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.413864][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.421955][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.435483][ T280] device veth0_vlan entered promiscuous mode [ 25.442352][ T275] device veth0_vlan entered promiscuous mode [ 25.449748][ T276] device veth1_macvtap entered promiscuous mode [ 25.458064][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.466184][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.474485][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.482579][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.499492][ T282] device veth0_vlan entered promiscuous mode [ 25.510102][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.518626][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.527123][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.536071][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.545040][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.552984][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.561501][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.570129][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.578569][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.586142][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.593950][ T275] device veth1_macvtap entered promiscuous mode [ 25.612478][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.621405][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.631071][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.639416][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.648055][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.656873][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.665246][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.674037][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.682644][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.691932][ T280] device veth1_macvtap entered promiscuous mode [ 25.703317][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.711453][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.719729][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.736426][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.745014][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.753779][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.762783][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.772056][ T282] device veth1_macvtap entered promiscuous mode [ 25.780243][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.788565][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.797171][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.813982][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 25.826192][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.835010][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.844321][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.852796][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.863680][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.872955][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.884585][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.365711][ T320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 26.382481][ T320] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.505378][ T329] loop3: p1 < > p3 [ 26.512287][ T329] loop3: p3 size 134217728 extends beyond EOD, truncated [ 26.606899][ T302] udevd[302]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 26.611306][ T298] udevd[298]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 26.627719][ T341] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.729930][ T299] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 26.899947][ T297] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.921015][ T355] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.934520][ T355] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 26.946403][ T355] EXT4-fs (loop4): 1 truncate cleaned up [ 26.952305][ T355] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004, [ 27.000744][ T299] usb 3-1: device descriptor read/64, error -71 [ 27.081652][ T359] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 27.101324][ T338] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 27.169662][ T359] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.15: bg 0: block 234: padding at end of block bitmap is not set [ 27.184103][ T359] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 27.196974][ T359] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.196974][ T359] [ 27.206837][ T359] EXT4-fs (loop4): Total free blocks count 0 [ 27.213124][ T359] EXT4-fs (loop4): Free/Dirty block details [ 27.219097][ T359] EXT4-fs (loop4): free_blocks=0 [ 27.224551][ T359] EXT4-fs (loop4): dirty_blocks=3616 [ 27.230692][ T359] EXT4-fs (loop4): Block reservation details [ 27.236771][ T359] EXT4-fs (loop4): i_reserved_data_blocks=226 [ 27.264423][ T49] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1564 with error 28 [ 27.277276][ T49] EXT4-fs (loop4): This should not happen!! Data will be lost [ 27.277276][ T49] [ 27.299967][ T297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 27.311975][ T297] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 27.325247][ T297] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 27.334898][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.346010][ T297] usb 4-1: config 0 descriptor?? [ 27.369930][ T342] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 27.390521][ T299] usb 3-1: device descriptor read/64, error -71 [ 27.445295][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 27.445307][ T24] audit: type=1400 audit(1757595946.150:132): avc: denied { create } for pid=373 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.470542][ T338] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 27.482059][ T338] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.491994][ T376] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noquota,errors=remount-ro,grpquota, [ 27.495075][ T338] usb 1-1: config 0 interface 0 has no altsetting 0 [ 27.515889][ T24] audit: type=1400 audit(1757595946.230:133): avc: denied { create } for pid=375 comm="syz.1.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 27.523121][ T338] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 27.544910][ T338] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.554760][ T338] usb 1-1: config 0 descriptor?? [ 27.651444][ T24] audit: type=1400 audit(1757595946.360:134): avc: denied { watch } for pid=380 comm="syz.1.20" path="/6/control" dev="tmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.670064][ T299] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 27.694788][ T24] audit: type=1400 audit(1757595946.380:135): avc: denied { create } for pid=380 comm="syz.1.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.768568][ T24] audit: type=1400 audit(1757595946.470:136): avc: denied { create } for pid=390 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.789424][ T24] audit: type=1400 audit(1757595946.500:137): avc: denied { create } for pid=390 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.827942][ T24] audit: type=1400 audit(1757595946.500:138): avc: denied { write } for pid=390 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.861412][ T24] audit: type=1400 audit(1757595946.500:139): avc: denied { nlmsg_write } for pid=390 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.882985][ T24] audit: type=1400 audit(1757595946.530:140): avc: denied { checkpoint_restore } for pid=382 comm="syz.4.21" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.920197][ T24] audit: type=1400 audit(1757595946.530:141): avc: denied { read } for pid=394 comm="syz.1.24" path="socket:[15013]" dev="sockfs" ino=15013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.951605][ T297] hkems 0003:2006:0118.0001: item fetching failed at offset 5/7 [ 27.959638][ T297] hkems 0003:2006:0118.0001: parse failed [ 27.965875][ T297] hkems: probe of 0003:2006:0118.0001 failed with error -22 [ 27.979901][ T299] usb 3-1: device descriptor read/64, error -71 [ 27.993812][ T397] FAT-fs (loop1): Directory bread(block 64) failed [ 28.000524][ T397] FAT-fs (loop1): Directory bread(block 65) failed [ 28.007317][ T397] FAT-fs (loop1): Directory bread(block 66) failed [ 28.014328][ T397] FAT-fs (loop1): Directory bread(block 67) failed [ 28.021343][ T397] FAT-fs (loop1): Directory bread(block 68) failed [ 28.028019][ T397] FAT-fs (loop1): Directory bread(block 69) failed [ 28.035117][ T397] FAT-fs (loop1): Directory bread(block 70) failed [ 28.041877][ T397] FAT-fs (loop1): Directory bread(block 71) failed [ 28.041995][ T338] holtek 0003:1241:5015.0002: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 28.048546][ T397] FAT-fs (loop1): Directory bread(block 72) failed [ 28.066651][ T397] FAT-fs (loop1): Directory bread(block 73) failed [ 28.076254][ T338] holtek 0003:1241:5015.0002: no inputs found [ 28.370058][ T299] usb 3-1: device descriptor read/64, error -71 [ 28.469874][ T297] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.489989][ T299] usb usb3-port1: attempt power cycle [ 28.739907][ T297] usb 2-1: Using ep0 maxpacket: 16 [ 28.860058][ T297] usb 2-1: config 0 interface 0 has no altsetting 0 [ 28.866778][ T297] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 28.876037][ T297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.885211][ T297] usb 2-1: config 0 descriptor?? [ 28.910325][ T299] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 29.029938][ T299] usb 3-1: device descriptor read/8, error -71 [ 29.249945][ T299] usb 3-1: device descriptor read/8, error -71 [ 29.370587][ T297] hid (null): unknown global tag 0xc [ 29.376051][ T297] hid (null): report_id 0 is invalid [ 29.390087][ T297] hid (null): global environment stack underflow [ 29.396574][ T297] hid (null): invalid report_size 4243 [ 29.410060][ T297] hid (null): unknown global tag 0xe [ 29.580887][ T401] devpts: called with bogus options [ 29.590592][ T353] usb 2-1: USB disconnect, device number 2 [ 29.615130][ T297] usb 4-1: USB disconnect, device number 2 [ 29.733760][ T422] EXT4-fs (loop3): Unrecognized mount option "subj_role=(" or missing value [ 29.749963][ T299] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 29.814220][ T349] usb 1-1: USB disconnect, device number 2 [ 29.989959][ T299] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 30.006602][ T299] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 30.033699][ T299] usb 3-1: config 0 interface 0 has no altsetting 0 [ 30.048061][ T299] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 30.057609][ T299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.066464][ T299] usb 3-1: config 0 descriptor?? [ 30.150797][ T435] loop0: p1 p2 p3 < p5 p6 p7 > [ 30.156602][ T435] loop0: p2 size 16775168 extends beyond EOD, truncated [ 30.173111][ T435] loop0: p5 start 4294970168 is beyond EOD, truncated [ 30.263296][ T343] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.267319][ T276] __loop_clr_fd: partition scan of loop0 failed (rc=-16) [ 30.284532][ T302] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.293996][ T440] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.306201][ T439] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.311934][ T441] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 30.324842][ T302] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.350423][ T343] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.369933][ T439] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.380009][ T440] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.381398][ T343] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 30.400963][ T441] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 30.409875][ T302] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 30.420401][ T439] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 30.428544][ T439] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 30.430280][ T440] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 30.445000][ T297] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 30.454799][ T441] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 30.468425][ T439] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 30.470181][ T441] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 30.481820][ T439] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 30.493538][ T439] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 30.555163][ T452] device syzkaller0 entered promiscuous mode [ 30.563720][ T299] holtek 0003:1241:5015.0004: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 30.576996][ T299] holtek 0003:1241:5015.0004: no inputs found [ 30.663466][ T444] SELinux: failed to load policy [ 30.713667][ T456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.783471][ T456] EXT4-fs (loop4): 1 truncate cleaned up [ 30.789386][ T456] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 30.820012][ T297] usb 2-1: config 0 has an invalid interface number: 135 but max is 0 [ 30.830183][ T297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.841126][ T297] usb 2-1: config 0 has no interface number 0 [ 30.847532][ T297] usb 2-1: config 0 interface 135 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 30.858407][ T297] usb 2-1: config 0 interface 135 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 31.030087][ T297] usb 2-1: New USB device found, idVendor=0482, idProduct=0101, bcdDevice= 1.00 [ 31.045848][ T297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.059952][ T297] usb 2-1: Product: syz [ 31.073668][ T297] usb 2-1: Manufacturer: syz [ 31.086441][ T297] usb 2-1: SerialNumber: syz [ 31.102327][ T297] usb 2-1: config 0 descriptor?? [ 31.113293][ T452] F2FS-fs (loop0): fault_injection options not supported [ 31.186312][ T452] F2FS-fs (loop0): fault_type options not supported [ 31.198764][ T452] F2FS-fs (loop0): invalid crc value [ 31.205148][ T456] EXT4-fs error (device loop4): ext4_generic_delete_entry:2683: inode #2: block 13: comm syz.4.43: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 31.226374][ T456] EXT4-fs (loop4): Remounting filesystem read-only [ 31.233570][ T456] EXT4-fs error (device loop4) in ext4_delete_entry:2741: Corrupt filesystem [ 31.243140][ T297] usb-storage 2-1:0.135: USB Mass Storage device detected [ 31.251071][ T456] EXT4-fs warning (device loop4): ext4_rename_delete:3901: inode #2: comm syz.4.43: Deleting old file: nlink 4, error=-117 [ 31.265320][ T297] usb-storage 2-1:0.135: Quirks match for vid 0482 pid 0101: 8 [ 31.281114][ T459] ÿÿÿÿÿÿ: renamed from vlan1 [ 31.287232][ T452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 31.364827][ T452] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 31.444522][ T297] usb 2-1: USB disconnect, device number 3 [ 31.552685][ T276] attempt to access beyond end of device [ 31.552685][ T276] loop0: rw=2049, want=45120, limit=40427 [ 32.120940][ T482] syz.1.49 uses obsolete (PF_INET,SOCK_PACKET) [ 32.127523][ T480] F2FS-fs (loop0): invalid crc value [ 32.134079][ T480] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.180218][ T480] F2FS-fs (loop0): Start checkpoint disabled! [ 32.187317][ T480] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 32.201990][ T297] usb 3-1: USB disconnect, device number 5 [ 33.023271][ T24] kauditd_printk_skb: 79 callbacks suppressed [ 33.023283][ T24] audit: type=1326 audit(1757595951.030:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f80e42ec65f code=0x7ffc0000 [ 33.087968][ T24] audit: type=1400 audit(1757595951.270:222): avc: denied { ioctl } for pid=479 comm="syz.0.48" path="/9/file0/file0" dev="loop0" ino=10 ioctlcmd=0xf50d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 33.118650][ T24] audit: type=1400 audit(1757595951.790:223): avc: denied { unmount } for pid=276 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.359987][ T24] audit: type=1326 audit(1757595951.970:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f80e42edc37 code=0x7ffc0000 [ 33.403537][ T9] attempt to access beyond end of device [ 33.403537][ T9] loop0: rw=2049, want=40968, limit=40427 [ 33.414916][ T297] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 33.433667][ T24] audit: type=1326 audit(1757595952.090:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f80e42ec510 code=0x7ffc0000 [ 33.457922][ T24] audit: type=1326 audit(1757595952.090:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80e42ed7ab code=0x7ffc0000 [ 33.481379][ T24] audit: type=1326 audit(1757595952.090:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80e42ed7ab code=0x7ffc0000 [ 33.492301][ T502] SELinux: Context Ü is not valid (left unmapped). [ 33.504659][ T24] audit: type=1326 audit(1757595952.090:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f80e4320465 code=0x7ffc0000 [ 33.535463][ T24] audit: type=1326 audit(1757595952.110:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f80e42ed7ab code=0x7ffc0000 [ 33.558486][ T24] audit: type=1326 audit(1757595952.110:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.1.49" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f80e42ec80a code=0x7ffc0000 [ 33.809322][ T517] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 33.869985][ T297] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 33.880858][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.892771][ T523] ====================================================== [ 33.892771][ T523] WARNING: the mand mount option is being deprecated and [ 33.892771][ T523] will be removed in v5.15! [ 33.892771][ T523] ====================================================== [ 33.919006][ T297] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.929097][ T297] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 33.942251][ T297] usb 3-1: New USB device found, idVendor=056a, idProduct=48de, bcdDevice= 0.2e [ 33.951456][ T297] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.963678][ T297] usb 3-1: config 0 descriptor?? [ 34.042191][ T523] Zero length message leads to an empty skb [ 34.290350][ T528] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 34.298141][ T528] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 34.307517][ T531] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 34.307661][ T528] F2FS-fs (loop3): invalid crc value [ 34.330468][ T528] F2FS-fs (loop3): Found nat_bits in checkpoint [ 34.358623][ T531] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,nolazytime,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue [ 34.387648][ T528] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 34.394757][ T528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 34.511406][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.518431][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.526087][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.570508][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.577709][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.584833][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.592370][ T297] wacom 0003:056A:48DE.0005: unknown main item tag 0x0 [ 34.599481][ T297] wacom 0003:056A:48DE.0005: Unknown device_type for 'HID 056a:48de'. Ignoring. [ 34.725897][ T545] EXT4-fs (loop4): failed to initialize system zone (-117) [ 34.733568][ T545] EXT4-fs (loop4): mount failed [ 37.104634][ T54] usb 3-1: USB disconnect, device number 6 [ 37.226132][ T580] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 37.235551][ T580] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 37.536145][ T302] print_req_error: 164 callbacks suppressed [ 37.536163][ T302] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.537467][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.574731][ T343] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.575475][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.598879][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.610069][ T302] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.610522][ T298] buffer_io_error: 129 callbacks suppressed [ 37.610533][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 37.635499][ T343] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.637077][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 37.658492][ T302] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 37.659230][ T581] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.676393][ T302] blk_update_request: I/O error, dev loop0, sector 14721 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.680650][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 37.696270][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 37.703056][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 37.719511][ T302] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 37.723023][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 37.736475][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 37.739221][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 37.750548][ T302] Buffer I/O error on dev loop0p6, logical block 11650, async page read [ 37.758244][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 37.949891][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 38.012786][ T581] usb 1-1: device descriptor read/64, error -71 [ 38.969890][ T581] usb 1-1: device descriptor read/64, error -71 [ 39.044539][ T617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 39.101750][ T619] EXT4-fs (loop4): Ignoring removed orlov option [ 39.112350][ T619] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue [ 39.239711][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 39.239723][ T24] audit: type=1400 audit(1757595957.940:243): avc: denied { write } for pid=618 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.265439][ T581] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 39.443380][ T624] netlink: 388 bytes leftover after parsing attributes in process `syz.2.82'. [ 39.549892][ T581] usb 1-1: device descriptor read/64, error -71 [ 40.123989][ T636] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.131303][ T636] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.397787][ T638] bridge: RTM_NEWNEIGH with invalid ether address [ 40.429911][ T581] usb 1-1: device descriptor read/64, error -71 [ 40.472298][ T643] capability: warning: `syz.4.88' uses 32-bit capabilities (legacy support in use) [ 40.528760][ T640] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 40.540223][ T640] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.547109][ T640] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 40.554629][ T581] usb usb1-port1: attempt power cycle [ 40.559893][ T640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.571647][ T640] EXT4-fs (loop3): 1 truncate cleaned up [ 40.577351][ T640] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,max_dir_size_kb=0x0000000000000006,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid, [ 40.680564][ T640] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 40.690054][ T24] audit: type=1400 audit(1757595959.390:244): avc: denied { mounton } for pid=639 comm="syz.3.84" path="/16/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.695751][ T640] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 40.712685][ T24] audit: type=1400 audit(1757595959.400:245): avc: denied { write } for pid=639 comm="syz.3.84" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.747623][ T24] audit: type=1400 audit(1757595959.400:246): avc: denied { add_name } for pid=639 comm="syz.3.84" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.789293][ T24] audit: type=1400 audit(1757595959.400:247): avc: denied { setattr } for pid=639 comm="syz.3.84" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.814888][ T275] EXT4-fs error (device loop3): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /16/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 40.838516][ T24] audit: type=1400 audit(1757595959.430:248): avc: denied { remove_name } for pid=639 comm="syz.3.84" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 40.860788][ T24] audit: type=1400 audit(1757595959.430:249): avc: denied { rename } for pid=639 comm="syz.3.84" name="#1" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.882355][ T275] EXT4-fs (loop3): Remounting filesystem read-only [ 40.892016][ T651] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.904121][ T651] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 40.914256][ T651] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 40.916698][ T661] xt_hashlimit: size too large, truncated to 1048576 [ 40.941950][ T24] audit: type=1400 audit(1757595959.430:250): avc: denied { unlink } for pid=639 comm="syz.3.84" name="#1" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 40.964078][ T24] audit: type=1400 audit(1757595959.430:251): avc: denied { unlink } for pid=639 comm="syz.3.84" name="#2" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.986029][ T24] audit: type=1400 audit(1757595959.430:252): avc: denied { setattr } for pid=639 comm="syz.3.84" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 41.443072][ T678] syz.3.93[678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.443247][ T678] syz.3.93[678] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.027545][ T680] EXT4-fs (loop4): Ignoring removed orlov option [ 42.563812][ T680] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 42.575186][ T680] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #17: comm syz.4.96: corrupted in-inode xattr [ 42.630566][ T680] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.96: couldn't read orphan inode 17 (err -117) [ 42.648415][ T680] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000957,nombcache,debug_want_extra_isize=0x000000000000002a,stripe=0x000000000000f151,orlov,nombcache,,errors=continue [ 42.681857][ T690] process 'syz.2.97' launched './file0' with NULL argv: empty string added [ 42.742715][ T680] EXT4-fs error (device loop4): ext4_find_dest_de:2079: inode #12: block 7: comm syz.4.96: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 43.020656][ T703] print_req_error: 40 callbacks suppressed [ 43.020674][ T703] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.039478][ T698] EXT4-fs (loop2): Ignoring removed nobh option [ 43.056940][ T709] SELinux: policydb table sizes (149,0) do not match mine (8,7) [ 43.079026][ T703] FAT-fs (loop7): unable to read boot sector [ 43.087206][ T698] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.101: bg 0: block 248: padding at end of block bitmap is not set [ 43.101808][ T698] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.101: Failed to acquire dquot type 1 [ 43.113609][ T698] EXT4-fs (loop2): 1 truncate cleaned up [ 43.115748][ T298] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.120890][ T439] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.131328][ T709] SELinux: failed to load policy [ 43.142600][ T698] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,sysvgroups,quota,nobh,init_itable=0x0000000000000040,,errors=continue [ 43.151854][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.161811][ T698] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.176278][ T343] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 43.200551][ T439] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.212478][ T298] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.229991][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.241529][ T302] buffer_io_error: 30 callbacks suppressed [ 43.241539][ T302] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 43.255801][ T343] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.257373][ T439] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 43.275452][ T298] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 43.283879][ T343] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 43.283964][ T343] blk_update_request: I/O error, dev loop0, sector 14721 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 43.308121][ T343] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 43.316561][ T343] Buffer I/O error on dev loop0p6, logical block 11650, async page read [ 43.329365][ T343] Buffer I/O error on dev loop0p6, logical block 11651, async page read [ 43.338166][ T343] Buffer I/O error on dev loop0p6, logical block 11652, async page read [ 43.346869][ T343] Buffer I/O error on dev loop0p6, logical block 11653, async page read [ 43.357565][ T343] Buffer I/O error on dev loop0p6, logical block 11654, async page read [ 43.392785][ T719] udc-core: couldn't find an available UDC or it's busy [ 43.406194][ T719] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.441786][ T714] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 43.452374][ T714] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.479095][ T714] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz.0.105: Directory hole found for htree leaf block 0 [ 43.649895][ T581] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.659981][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.889922][ T581] usb 3-1: Using ep0 maxpacket: 16 [ 44.036365][ T581] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 44.036548][ T15] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.056787][ T581] usb 3-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 44.067749][ T581] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.086723][ T15] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.182198][ T739] SELinux: failed to load policy [ 44.416210][ T15] usb 2-1: config 0 interface 0 has no altsetting 0 [ 44.487411][ T15] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.517164][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.588179][ T15] usb 2-1: config 0 descriptor?? [ 44.598329][ T581] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.612843][ T581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.627793][ T581] usb 3-1: Product: syz [ 44.639313][ T581] usb 3-1: Manufacturer: syz [ 44.645084][ T581] usb 3-1: SerialNumber: syz [ 45.058129][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 45.058143][ T24] audit: type=1400 audit(1757595963.760:271): avc: denied { execute_no_trans } for pid=743 comm="syz.4.112" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.160032][ T581] usb 3-1: 0:2 : does not exist [ 45.180256][ T750] exfat: Deprecated parameter 'utf8' [ 45.185663][ T750] exfat: Deprecated parameter 'utf8' [ 45.191115][ T750] exfat: Deprecated parameter 'utf8' [ 45.220002][ T15] usbhid 2-1:0.0: can't add hid device: -32 [ 45.226213][ T15] usbhid: probe of 2-1:0.0 failed with error -32 [ 45.281554][ T750] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 45.361458][ T24] audit: type=1400 audit(1757595964.070:272): avc: denied { write } for pid=749 comm="syz.3.114" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.383515][ T581] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 45.685640][ T581] usb 3-1: USB disconnect, device number 7 [ 45.931793][ T24] audit: type=1400 audit(1757595964.100:273): avc: denied { add_name } for pid=749 comm="syz.3.114" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.558932][ T353] usb 2-1: USB disconnect, device number 4 [ 46.593491][ T24] audit: type=1400 audit(1757595964.100:274): avc: denied { associate } for pid=749 comm="syz.3.114" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 46.615925][ T24] audit: type=1400 audit(1757595964.100:275): avc: denied { read open } for pid=749 comm="syz.3.114" path="/25/file1/bus" dev="loop3" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.643001][ T24] audit: type=1400 audit(1757595964.110:276): avc: denied { write } for pid=749 comm="syz.3.114" name="bus" dev="loop3" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.711650][ T24] audit: type=1326 audit(1757595965.400:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 46.746133][ T24] audit: type=1326 audit(1757595965.400:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 46.769559][ T24] audit: type=1326 audit(1757595965.400:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 46.786105][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.799888][ T24] audit: type=1326 audit(1757595965.400:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=759 comm="syz.4.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 47.723049][ T786] fuse: Unknown parameter '' [ 47.854549][ T793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 47.866518][ T792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.125'. [ 48.278682][ T800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 48.304544][ T806] syz.1.128[806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.304629][ T806] syz.1.128[806] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 48.365863][ T811] netlink: 96 bytes leftover after parsing attributes in process `syz.3.130'. [ 48.451084][ T818] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 48.465814][ T818] EXT4-fs error (device loop3): ext4_orphan_get:1421: comm syz.3.134: bad orphan inode 11 [ 48.482606][ T818] EXT4-fs (loop3): Remounting filesystem read-only [ 48.489272][ T818] ext4_test_bit(bit=10, block=4) = 1 [ 48.495067][ T818] is_bad_inode(inode)=0 [ 48.499355][ T818] NEXT_ORPHAN(inode)=3254779904 [ 48.504370][ T818] max_ino=32 [ 48.507607][ T818] i_nlink=0 [ 48.510828][ T818] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt, [ 48.526440][ T820] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 48.536197][ T820] EXT4-fs error (device loop2): ext4_orphan_get:1421: comm syz.2.135: bad orphan inode 11 [ 48.546662][ T820] EXT4-fs (loop2): Remounting filesystem read-only [ 48.553408][ T820] ext4_test_bit(bit=10, block=4) = 1 [ 48.558804][ T820] is_bad_inode(inode)=0 [ 48.563289][ T820] NEXT_ORPHAN(inode)=3254779904 [ 48.573102][ T820] max_ino=32 [ 48.579345][ T820] i_nlink=0 [ 48.584747][ T820] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt, [ 48.634631][ T439] print_req_error: 91 callbacks suppressed [ 48.634648][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.656276][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.656325][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.681544][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.703338][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.715254][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.732358][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.747987][ T298] buffer_io_error: 70 callbacks suppressed [ 48.747997][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 48.761118][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.762169][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.784578][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 48.792964][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.804499][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 48.812602][ T760] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 48.821279][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 48.829424][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 48.838753][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 48.844068][ T583] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 48.847151][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 48.873352][ T760] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 48.879603][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 49.043736][ T835] incfs: Options parsing error. -22 [ 49.049217][ T835] incfs: mount failed -22 [ 49.300134][ T583] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 49.333384][ T583] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 49.378610][ T583] usb 1-1: config 0 interface 0 has no altsetting 0 [ 49.404238][ T583] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 49.421913][ T583] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.449395][ T583] usb 1-1: config 0 descriptor?? [ 49.941491][ T583] holtek 0003:1241:5015.0006: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.0-1/input0 [ 49.959854][ T583] holtek 0003:1241:5015.0006: no inputs found [ 49.969978][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.179633][ T24] kauditd_printk_skb: 68 callbacks suppressed [ 50.179646][ T24] audit: type=1400 audit(1757595968.884:349): avc: denied { create } for pid=862 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.206640][ T24] audit: type=1400 audit(1757595968.914:350): avc: denied { getopt } for pid=862 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 50.274199][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 50.400217][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.432457][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.484950][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 50.555887][ T25] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 50.579886][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.661985][ T25] usb 5-1: config 0 descriptor?? [ 50.831671][ T865] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,bsddf,discard,grpjquota=,dioread_nolock,,errors=continue [ 50.911112][ T865] netlink: 'syz.2.145': attribute type 4 has an invalid length. [ 50.918859][ T865] netlink: 'syz.2.145': attribute type 5 has an invalid length. [ 50.926558][ T865] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.145'. [ 50.969980][ T24] audit: type=1400 audit(1757595969.674:351): avc: denied { write } for pid=850 comm="syz.4.142" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.148926][ T24] audit: type=1400 audit(1757595969.704:352): avc: denied { open } for pid=850 comm="syz.4.142" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.174370][ T24] audit: type=1400 audit(1757595969.714:353): avc: denied { ioctl } for pid=850 comm="syz.4.142" path="/dev/input/event0" dev="devtmpfs" ino=255 ioctlcmd=0x4509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.240198][ T858] F2FS-fs (loop3): invalid crc value [ 51.287431][ T858] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387) [ 51.299892][ T25] microsoft 0003:045E:07DA.0007: bogus close delimiter [ 51.306875][ T25] microsoft 0003:045E:07DA.0007: item 0 0 2 10 parsing failed [ 51.315804][ T25] microsoft 0003:045E:07DA.0007: parse failed [ 51.322162][ T858] F2FS-fs (loop3): Mounted with checkpoint version = 753bd00b [ 51.332611][ T25] microsoft: probe of 0003:045E:07DA.0007 failed with error -22 [ 51.547799][ T15] usb 1-1: USB disconnect, device number 6 [ 51.762279][ T353] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 51.774169][ T887] syz.0.149[887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 51.774281][ T887] syz.0.149[887] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 53.961402][ T15] usb 5-1: USB disconnect, device number 2 [ 54.450119][ T353] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 54.603992][ T353] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.674281][ T442] print_req_error: 39 callbacks suppressed [ 54.674299][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.709136][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.891829][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 54.908366][ T353] usb 3-1: config 0 interface 0 has no altsetting 0 [ 54.909818][ C1] sched: RT throttling activated [ 54.920554][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.930012][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 54.943231][ T353] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 54.952632][ T353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.961553][ T353] usb 3-1: config 0 descriptor?? [ 54.967893][ T442] buffer_io_error: 30 callbacks suppressed [ 54.967904][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 54.985227][ T24] audit: type=1400 audit(1757595973.694:354): avc: denied { bind } for pid=909 comm="syz.3.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.005881][ T353] usb 3-1: can't set config #0, error -71 [ 55.016063][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.028135][ T353] usb 3-1: USB disconnect, device number 8 [ 55.041695][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 55.052981][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 55.076285][ T899] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 55.089057][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.104679][ T442] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.124517][ T899] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.153: bad orphan inode 11 [ 55.136629][ T439] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 55.173351][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 55.181957][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 55.190354][ T442] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 55.193389][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 55.209719][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 55.214499][ T439] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 55.218045][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 55.226740][ T899] EXT4-fs (loop4): Remounting filesystem read-only [ 55.241114][ T442] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 55.243763][ T899] ext4_test_bit(bit=10, block=4) = 1 [ 55.254917][ T899] is_bad_inode(inode)=0 [ 55.259062][ T24] audit: type=1400 audit(1757595973.964:355): avc: denied { read } for pid=919 comm="syz.1.158" name="usbmon5" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.259223][ T899] NEXT_ORPHAN(inode)=3254779904 [ 55.287080][ T899] max_ino=32 [ 55.290325][ T899] i_nlink=0 [ 55.293533][ T899] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt, [ 55.325785][ T24] audit: type=1400 audit(1757595973.964:356): avc: denied { open } for pid=919 comm="syz.1.158" path="/dev/usbmon5" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.355644][ T24] audit: type=1400 audit(1757595973.964:357): avc: denied { ioctl } for pid=919 comm="syz.1.158" path="/dev/usbmon5" dev="devtmpfs" ino=169 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 55.417955][ T927] EXT4-fs error (device loop1): ext4_orphan_get:1395: inode #15: comm syz.1.160: casefold flag without casefold feature [ 55.431320][ T927] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.160: couldn't read orphan inode 15 (err -117) [ 55.443489][ T927] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 55.518753][ T24] audit: type=1400 audit(1757595974.224:358): avc: denied { mount } for pid=931 comm="syz.1.161" name="/" dev="configfs" ino=12722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 55.584089][ T932] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 55.592827][ T54] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 56.038142][ T24] audit: type=1400 audit(1757595974.724:359): avc: denied { mount } for pid=936 comm="syz.0.162" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 56.339911][ T54] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 56.351639][ T54] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.384218][ T943] syz.3.163[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.384274][ T943] syz.3.163[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.398663][ T943] syz.3.163[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.415462][ T943] syz.3.163[943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.581184][ T54] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 56.601537][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.617240][ T54] usb 3-1: Product: syz [ 56.621508][ T54] usb 3-1: Manufacturer: syz [ 56.628735][ T54] usb 3-1: SerialNumber: syz [ 56.733121][ T955] bridge0: port 3(syz_tun) entered blocking state [ 56.739632][ T955] bridge0: port 3(syz_tun) entered disabled state [ 56.748834][ T955] device syz_tun entered promiscuous mode [ 56.755240][ T955] bridge0: port 3(syz_tun) entered blocking state [ 56.761695][ T955] bridge0: port 3(syz_tun) entered forwarding state [ 56.787807][ T955] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 56.882334][ T353] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 56.890026][ T299] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 57.250405][ T353] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 57.250460][ T299] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 57.272890][ T299] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.285361][ T299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 57.292875][ T299] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 57.303096][ T353] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 57.315888][ T299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.345786][ T353] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 57.506650][ T299] usb 2-1: config 0 descriptor?? [ 57.572185][ T353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.610083][ T943] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 57.865030][ T967] EXT4-fs (loop4): Unrecognized mount option "subj_user=/sys/kernel/debug/binder/failed_transaction_log" or missing value [ 57.879940][ T353] usb 4-1: string descriptor 0 read error: -71 [ 57.890273][ T353] hub 4-1:32.0: USB hub found [ 57.949930][ T353] hub 4-1:32.0: config failed, can't read hub descriptor (err -22) [ 58.039941][ T54] usb 3-1: 0:2 : does not exist [ 58.054861][ T54] usb 3-1: USB disconnect, device number 9 [ 58.062288][ T299] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 58.080099][ T299] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 58.095857][ T299] hid-steam 0003:28DE:1102.0008: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 58.107604][ T353] usb 4-1: USB disconnect, device number 3 [ 58.114708][ T299] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 58.149026][ T299] hid-steam 0003:28DE:1102.0009: unknown main item tag 0x0 [ 58.157964][ T299] hid-steam 0003:28DE:1102.0009: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 58.181960][ T972] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 58.194498][ T972] bridge_slave_0: FDB only supports static addresses [ 58.210725][ T24] audit: type=1326 audit(1757595976.924:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=971 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 58.239928][ T299] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' connected [ 58.252522][ T299] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0008/input/input7 [ 58.265747][ T948] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0008/input/input8 [ 58.269961][ T24] audit: type=1326 audit(1757595976.944:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=971 comm="syz.4.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 58.303511][ T442] udevd[442]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 58.387836][ T24] audit: type=1400 audit(1757595976.974:362): avc: denied { append } for pid=947 comm="syz.1.165" name="hidraw0" dev="devtmpfs" ino=617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.416569][ T24] audit: type=1400 audit(1757595977.014:363): avc: denied { read } for pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.449032][ T24] audit: type=1400 audit(1757595977.014:364): avc: denied { open } for pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=618 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 58.546380][ T985] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 58.558899][ T353] usb 2-1: USB disconnect, device number 5 [ 58.621449][ T353] hid-steam 0003:28DE:1102.0008: Steam Controller 'XXXXXXXXXX' disconnected [ 58.632990][ T985] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.174: bad orphan inode 11 [ 58.646278][ T985] EXT4-fs (loop0): Remounting filesystem read-only [ 58.653328][ T985] ext4_test_bit(bit=10, block=4) = 1 [ 58.658717][ T985] is_bad_inode(inode)=0 [ 58.663817][ T985] NEXT_ORPHAN(inode)=3254779904 [ 58.668724][ T985] max_ino=32 [ 58.672054][ T985] i_nlink=0 [ 58.675278][ T985] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt, [ 58.850925][ T1003] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 58.984031][ T1011] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 59.019242][ T1011] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.928875][ T1033] incfs: Can't find or create .index dir in ./file0 [ 60.027926][ T1033] incfs: mount failed -5 [ 60.386719][ T1049] sch_fq: defrate 0 ignored. [ 60.465827][ T1052] SELinux: failed to load policy [ 60.787477][ T442] print_req_error: 164 callbacks suppressed [ 60.787507][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.808613][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.814403][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.823154][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 60.834065][ T442] buffer_io_error: 129 callbacks suppressed [ 60.834078][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 60.844004][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.851968][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 60.858466][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 60.888808][ T1054] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 60.888808][ T1054] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 60.888808][ T1054] [ 60.921969][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 60.970332][ T1054] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 60.991805][ T1054] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,abort,max_batch_time=0x0000000000000009,minixdf,discard,max_dir_size_kb=0x0000000000000000,noacl,noinit_itable,nomblk_io_submit,noinit_itable,inode_readahead_blks=0x0000000000040000,,errors=continue [ 61.030286][ T1054] EXT4-fs error (device loop0): ext4_remount:5878: Abort forced by user [ 61.064901][ T1054] EXT4-fs (loop0): Remounting filesystem read-only [ 61.137793][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.152022][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.165956][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.187813][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 61.205325][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 61.205338][ T24] audit: type=1400 audit(1757595979.914:384): avc: denied { unmount } for pid=275 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 61.207756][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 61.213643][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 61.255216][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 61.269964][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 61.278173][ T760] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 61.287685][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 61.297009][ T760] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 61.342652][ T1070] bridge0: port 3(syz_tun) entered disabled state [ 61.363890][ T1070] device syz_tun left promiscuous mode [ 61.452203][ T1070] bridge0: port 3(syz_tun) entered disabled state [ 61.491221][ T24] audit: type=1326 audit(1757595980.204:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 61.556579][ T1081] syz.2.196[1081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.556946][ T1081] syz.2.196[1081] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.632877][ T1081] binder: BINDER_SET_CONTEXT_MGR already set [ 61.650157][ T1081] binder: 1068:1081 ioctl 4018620d 200000000040 returned -16 [ 62.577203][ T24] audit: type=1400 audit(1757595980.294:386): avc: denied { read } for pid=1068 comm="syz.2.196" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.617549][ T1078] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,journal_dev=0x0000000000000002,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue [ 62.911470][ T24] audit: type=1400 audit(1757595980.294:387): avc: denied { open } for pid=1068 comm="syz.2.196" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.942395][ T24] audit: type=1400 audit(1757595980.304:388): avc: denied { ioctl } for pid=1068 comm="syz.2.196" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.967666][ T1081] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.967676][ T1081] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 62.982652][ T1081] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 63.223295][ T24] audit: type=1400 audit(1757595980.314:389): avc: denied { set_context_mgr } for pid=1068 comm="syz.2.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 63.243412][ T24] audit: type=1400 audit(1757595980.334:390): avc: denied { write } for pid=1068 comm="syz.2.196" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.267975][ T24] audit: type=1400 audit(1757595980.334:391): avc: denied { map } for pid=1068 comm="syz.2.196" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 63.309153][ T24] audit: type=1326 audit(1757595981.134:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 63.338568][ T24] audit: type=1326 audit(1757595981.134:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1067 comm="syz.4.197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 63.389346][ T1097] netlink: 88 bytes leftover after parsing attributes in process `syz.4.203'. [ 63.399176][ T1097] xt_hashlimit: size too large, truncated to 1048576 [ 63.508324][ T1089] EXT4-fs (loop1): Unrecognized mount option "subj_user=/sys/kernel/debug/binder/failed_transaction_log" or missing value [ 63.690912][ T1102] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.202: casefold flag without casefold feature [ 63.711897][ T1102] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.202: couldn't read orphan inode 15 (err -117) [ 63.740053][ T598] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.787371][ T1112] SELinux: failed to load policy [ 63.830418][ T1102] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 64.010197][ T598] usb 5-1: Using ep0 maxpacket: 16 [ 64.189928][ T598] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.203547][ T598] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.225858][ T1118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 64.379945][ T598] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.389137][ T598] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.397582][ T598] usb 5-1: Product: syz [ 64.401947][ T598] usb 5-1: Manufacturer: syz [ 64.424196][ T598] usb 5-1: SerialNumber: syz [ 64.429551][ T1121] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue [ 64.445415][ T1121] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.552596][ T1127] 9pnet: Insufficient options for proto=fd [ 64.561213][ T49] EXT4-fs error (device loop0): ext4_map_blocks:740: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 64.605159][ T49] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 64.672089][ T49] EXT4-fs (loop0): This should not happen!! Data will be lost [ 64.672089][ T49] [ 65.060350][ T598] usb 5-1: cannot find UAC_HEADER [ 65.102978][ T598] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 65.173870][ T1133] EXT4-fs (loop0): Unrecognized mount option "obj_type=" or missing value [ 65.397344][ T598] usb 5-1: USB disconnect, device number 3 [ 65.945248][ T1141] overlayfs: invalid origin (0000) [ 66.095416][ T1147] FAULT_INJECTION: forcing a failure. [ 66.095416][ T1147] name failslab, interval 1, probability 0, space 0, times 1 [ 66.108341][ T1147] CPU: 0 PID: 1147 Comm: syz.2.215 Not tainted syzkaller #0 [ 66.115635][ T1147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 66.124331][ T442] print_req_error: 121 callbacks suppressed [ 66.124351][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.125704][ T1147] Call Trace: [ 66.134368][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.143067][ T1147] __dump_stack+0x21/0x24 [ 66.143080][ T1147] dump_stack_lvl+0x169/0x1d8 [ 66.143092][ T1147] ? thaw_kernel_threads+0x220/0x220 [ 66.143103][ T1147] ? show_regs_print_info+0x18/0x18 [ 66.143124][ T1147] ? proc_fail_nth_read+0x210/0x210 [ 66.148427][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.157934][ T1147] dump_stack+0x15/0x1c [ 66.157948][ T1147] should_fail+0x3c1/0x510 [ 66.157960][ T1147] ? map_delete_elem+0x203/0x510 [ 66.157974][ T1147] __should_failslab+0xa4/0xe0 [ 66.157986][ T1147] should_failslab+0x9/0x20 [ 66.158000][ T1147] __kmalloc_track_caller+0x5f/0x320 [ 66.158021][ T1147] memdup_user+0x25/0xb0 [ 66.164330][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.167020][ T1147] map_delete_elem+0x203/0x510 [ 66.174375][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 66.177611][ T1147] ? security_bpf+0x82/0xa0 [ 66.259653][ T1147] __se_sys_bpf+0x3bf/0x680 [ 66.264154][ T1147] ? __x64_sys_bpf+0x90/0x90 [ 66.268745][ T1147] ? fpu__clear_all+0x20/0x20 [ 66.273422][ T1147] __x64_sys_bpf+0x7b/0x90 [ 66.277836][ T1147] do_syscall_64+0x31/0x40 [ 66.282246][ T1147] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 66.288142][ T1147] RIP: 0033:0x7f51780bbba9 [ 66.292556][ T1147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.312152][ T1147] RSP: 002b:00007f5176b24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 66.320565][ T1147] RAX: ffffffffffffffda RBX: 00007f5178302fa0 RCX: 00007f51780bbba9 [ 66.328529][ T1147] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 66.336492][ T1147] RBP: 00007f5176b24090 R08: 0000000000000000 R09: 0000000000000000 [ 66.344466][ T1147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.352958][ T1147] R13: 00007f5178303038 R14: 00007f5178302fa0 R15: 00007fff7844bc08 [ 66.367370][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.379021][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.390652][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.402505][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.414067][ T760] buffer_io_error: 93 callbacks suppressed [ 66.414077][ T760] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 66.428504][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 66.431302][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 66.447912][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 66.457953][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 66.469918][ T760] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 66.484118][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 66.489182][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 66.501955][ T1143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.214'. [ 66.511183][ T760] Buffer I/O error on dev loop0p6, logical block 11650, async page read [ 66.519667][ T760] Buffer I/O error on dev loop0p6, logical block 11651, async page read [ 66.528371][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 66.553559][ T1155] syz.2.218[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.553622][ T1155] syz.2.218[1155] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.568052][ T24] kauditd_printk_skb: 29 callbacks suppressed [ 66.568066][ T24] audit: type=1400 audit(1757595985.274:423): avc: denied { map } for pid=1154 comm="syz.2.218" path="socket:[18094]" dev="sockfs" ino=18094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 66.571290][ T598] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 67.255416][ T1164] SELinux: failed to load policy [ 67.282810][ T1143] EXT4-fs (loop3): dax option not supported [ 67.350967][ T283] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 67.629043][ T1143] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 67.638126][ T1143] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.646802][ T598] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.648237][ T1143] F2FS-fs (loop3): fault_type options not supported [ 67.657673][ T598] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.664726][ T1143] F2FS-fs (loop3): invalid crc value [ 68.150607][ T283] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 68.173520][ T598] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 68.195194][ T598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.206837][ T598] usb 2-1: Product: syz [ 68.260279][ T283] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.280019][ T1143] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.328831][ T598] usb 2-1: Manufacturer: syz [ 68.346039][ T598] usb 2-1: SerialNumber: syz [ 68.352238][ T283] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.386548][ T283] usb 1-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.00 [ 68.396128][ T283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.561858][ T1143] F2FS-fs (loop3): Start checkpoint disabled! [ 68.569213][ T1143] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 68.576410][ T1143] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 68.636130][ T24] audit: type=1400 audit(1757595987.344:424): avc: denied { rename } for pid=1142 comm="syz.3.214" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 68.681322][ T1143] attempt to access beyond end of device [ 68.681322][ T1143] loop3: rw=2049, want=45104, limit=40427 [ 68.717637][ T9] attempt to access beyond end of device [ 68.717637][ T9] loop3: rw=2049, want=40992, limit=40427 [ 68.750268][ T598] usb 2-1: 0:2 : does not exist [ 68.803014][ T598] usb 2-1: USB disconnect, device number 6 [ 68.933008][ T283] usb 1-1: config 0 descriptor?? [ 68.950184][ T1183] netlink: 252 bytes leftover after parsing attributes in process `syz.2.226'. [ 68.971697][ T1183] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.978741][ T1183] EXT4-fs (loop2): Test dummy encryption mode enabled [ 68.989102][ T1183] EXT4-fs (loop2): Unrecognized mount option "fsname=barrier" or missing value [ 69.050119][ T24] audit: type=1326 audit(1757595987.764:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92be05aba9 code=0x7ffc0000 [ 69.078062][ T24] audit: type=1326 audit(1757595987.764:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1186 comm="syz.3.225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92be05aba9 code=0x7ffc0000 [ 69.157698][ T24] audit: type=1400 audit(1757595987.864:427): avc: denied { setattr } for pid=1182 comm="syz.2.226" name="NETLINK" dev="sockfs" ino=18168 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.842195][ T1201] FAULT_INJECTION: forcing a failure. [ 69.842195][ T1201] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.856167][ T1201] CPU: 0 PID: 1201 Comm: syz.2.229 Not tainted syzkaller #0 [ 69.863472][ T1201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 69.873539][ T1201] Call Trace: [ 69.876850][ T1201] __dump_stack+0x21/0x24 [ 69.881187][ T1201] dump_stack_lvl+0x169/0x1d8 [ 69.886336][ T1201] ? show_regs_print_info+0x18/0x18 [ 69.891725][ T1201] dump_stack+0x15/0x1c [ 69.895892][ T1201] should_fail+0x3c1/0x510 [ 69.900313][ T1201] should_fail_usercopy+0x1a/0x20 [ 69.905341][ T1201] _copy_from_user+0x20/0xd0 [ 69.909974][ T1201] memdup_user+0x5e/0xb0 [ 69.914243][ T1201] map_delete_elem+0x203/0x510 [ 69.919015][ T1201] ? security_bpf+0x82/0xa0 [ 69.923524][ T1201] __se_sys_bpf+0x3bf/0x680 [ 69.928130][ T1201] ? __x64_sys_bpf+0x90/0x90 [ 69.932820][ T1201] ? fpu__clear_all+0x20/0x20 [ 69.937528][ T1201] __x64_sys_bpf+0x7b/0x90 [ 69.941976][ T1201] do_syscall_64+0x31/0x40 [ 69.946439][ T1201] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.952344][ T1201] RIP: 0033:0x7f51780bbba9 [ 69.956775][ T1201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.976397][ T1201] RSP: 002b:00007f5176b24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 69.984918][ T1201] RAX: ffffffffffffffda RBX: 00007f5178302fa0 RCX: 00007f51780bbba9 [ 69.992917][ T1201] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 70.000897][ T1201] RBP: 00007f5176b24090 R08: 0000000000000000 R09: 0000000000000000 [ 70.008898][ T1201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.017013][ T1201] R13: 00007f5178303038 R14: 00007f5178302fa0 R15: 00007fff7844bc08 [ 70.036188][ T1159] udc-core: couldn't find an available UDC or it's busy [ 70.055952][ T1159] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.140835][ T283] usbhid 1-1:0.0: can't add hid device: -71 [ 70.147101][ T283] usbhid: probe of 1-1:0.0 failed with error -71 [ 70.161509][ T283] usb 1-1: USB disconnect, device number 7 [ 70.590254][ T1211] syz.1.232[1211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.590396][ T1211] syz.1.232[1211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.912742][ T24] audit: type=1400 audit(1757595989.614:428): avc: denied { watch watch_reads } for pid=1189 comm="syz.3.227" path="/45/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.407802][ T442] print_req_error: 65 callbacks suppressed [ 72.407819][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.453861][ T353] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 72.470115][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.483586][ T442] buffer_io_error: 50 callbacks suppressed [ 72.483598][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 72.500247][ T439] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.503970][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.525021][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.537978][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 72.540113][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.560888][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 72.571784][ T298] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.583329][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.587557][ T1215] EXT4-fs error (device loop3): ext4_orphan_get:1395: inode #15: comm syz.3.235: casefold flag without casefold feature [ 72.594882][ T760] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 72.619249][ T439] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 72.643242][ T1228] SELinux: failed to load policy [ 72.668957][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 72.679787][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 72.861546][ T1215] EXT4-fs error (device loop3): ext4_orphan_get:1400: comm syz.3.235: couldn't read orphan inode 15 (err -117) [ 72.959958][ T298] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 73.012006][ T760] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 73.021310][ T760] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 73.031695][ T1215] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue [ 73.047082][ T760] Buffer I/O error on dev loop0p6, logical block 11650, async page read [ 73.057860][ T302] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 73.583294][ T353] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 73.609865][ T353] usb 3-1: can't read configurations, error -71 [ 73.699800][ T1239] netlink: 88 bytes leftover after parsing attributes in process `syz.1.240'. [ 73.749470][ T1239] xt_hashlimit: size too large, truncated to 1048576 [ 73.805747][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 73.862013][ T1235] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.895605][ T1240] device veth0_vlan left promiscuous mode [ 73.949847][ T24] audit: type=1400 audit(1757595992.634:429): avc: denied { read } for pid=1234 comm="syz.2.239" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 73.979398][ T24] audit: type=1326 audit(1757595992.644:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.002718][ T24] audit: type=1326 audit(1757595992.644:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.010138][ T1240] device veth0_vlan entered promiscuous mode [ 74.026462][ T24] audit: type=1326 audit(1757595992.644:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.065134][ T1240] device veth1_macvtap left promiscuous mode [ 74.070062][ T24] audit: type=1326 audit(1757595992.644:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.103125][ T24] audit: type=1326 audit(1757595992.644:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.112548][ T1240] device veth1_macvtap entered promiscuous mode [ 74.136290][ T24] audit: type=1326 audit(1757595992.644:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 74.175465][ T1240] pimreg: default qdisc (pfifo_fast) fail, fallback to noqueue [ 74.184700][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.267839][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.278108][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.300513][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.307632][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.403807][ T24] audit: type=1400 audit(1757595993.054:436): avc: denied { append } for pid=1245 comm="syz.4.243" name="001" dev="devtmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.649479][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.725451][ T1258] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 74.875130][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.506820][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.514114][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.559980][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.582464][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 75.600381][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.618932][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 75.635763][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.653150][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.669721][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.688290][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.714465][ T1269] EXT4-fs (loop2): mounted filesystem without journal. Opts: user_xattr,data_err=ignore,noblock_validity,,errors=continue [ 75.731527][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.763847][ T1269] EXT4-fs warning (device loop2): dx_probe:836: inode #2: comm syz.2.246: Unimplemented hash flags: 0x0001 [ 75.780128][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.795476][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.805624][ T1269] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.246: Corrupt directory, running e2fsck is recommended [ 75.855203][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.874297][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.883865][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.894727][ T1269] EXT4-fs warning (device loop2): dx_probe:836: inode #2: comm syz.2.246: Unimplemented hash flags: 0x0001 [ 75.910732][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.919146][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 75.927256][ T1269] EXT4-fs warning (device loop2): dx_probe:946: inode #2: comm syz.2.246: Corrupt directory, running e2fsck is recommended [ 75.940628][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 75.951162][ T24] audit: type=1400 audit(1757595994.664:437): avc: denied { write } for pid=1268 comm="syz.2.246" name="usbmon1" dev="devtmpfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 75.956623][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.990503][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.999358][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.007646][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.015939][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.023557][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.031217][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.178721][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.188273][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.197117][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.402174][ T1280] SELinux: failed to load policy [ 76.407659][ T24] audit: type=1400 audit(1757595995.114:438): avc: denied { mounton } for pid=1272 comm="syz.0.247" path="/proc/135/task" dev="proc" ino=18590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 76.743076][ T1248] bridge: RTM_NEWNEIGH with invalid ether address [ 76.902898][ T1294] EXT4-fs (loop3): error: could not find journal device path: error -2 [ 77.712149][ T1305] incfs: Backing dir is not set, filesystem can't be mounted. [ 77.719869][ T1305] incfs: mount failed -2 [ 78.228736][ T298] print_req_error: 115 callbacks suppressed [ 78.228755][ T298] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.248464][ T760] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.261945][ T1282] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 78.269706][ T1282] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 78.289739][ T302] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.303454][ T343] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.317147][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 78.348236][ T343] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.360941][ T302] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.372812][ T760] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.390666][ T442] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.402344][ T1282] F2FS-fs (loop2): invalid crc value [ 78.407828][ T298] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.419871][ T343] buffer_io_error: 90 callbacks suppressed [ 78.419883][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 78.435457][ T760] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 78.435738][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 78.443845][ T302] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 78.452871][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 78.469763][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 78.470178][ T442] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 78.478226][ T343] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 78.489844][ T298] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 78.502243][ T760] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 78.513208][ T1310] syz.4.258 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 78.513849][ T1282] F2FS-fs (loop2): Found nat_bits in checkpoint [ 78.602886][ T598] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.653921][ T1282] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 78.666932][ T1282] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.776160][ T1282] overlayfs: missing 'lowerdir' [ 78.922030][ T598] usb 4-1: Using ep0 maxpacket: 16 [ 78.974895][ T1334] SELinux: failed to load policy [ 79.168621][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 79.168681][ T24] audit: type=1400 audit(1757595997.624:446): avc: denied { ioctl } for pid=1327 comm="syz.0.263" path="socket:[18371]" dev="sockfs" ino=18371 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.320472][ T598] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.412169][ T1339] netlink: 88 bytes leftover after parsing attributes in process `syz.2.265'. [ 79.421984][ T1339] xt_hashlimit: size too large, truncated to 1048576 [ 79.505033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 79.515652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.524049][ T598] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.534362][ T598] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.549653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 79.557954][ T598] usb 4-1: Product: syz [ 79.562415][ T598] usb 4-1: Manufacturer: syz [ 79.567062][ T598] usb 4-1: SerialNumber: syz [ 79.616501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.630360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.685261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.693843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.702367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.769975][ T283] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 80.839852][ T283] usb 3-1: Using ep0 maxpacket: 16 [ 80.942730][ T598] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 80.948802][ T598] cdc_ncm 4-1:1.0: bind() failure [ 80.979925][ T283] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.980074][ T598] cdc_ncm 4-1:1.1: bind() failure [ 80.990424][ T1369] incfs: Error accessing: ./file0. [ 81.006864][ T598] usb 4-1: USB disconnect, device number 4 [ 81.019844][ T283] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.026327][ T1369] incfs: mount failed -20 [ 81.081784][ T1359] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.107213][ T1359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.117094][ T1359] F2FS-fs (loop1): invalid crc value [ 81.147611][ T24] audit: type=1400 audit(1757595999.834:447): avc: denied { read } for pid=1376 comm="syz.4.277" path="socket:[18727]" dev="sockfs" ino=18727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.179938][ T24] audit: type=1326 audit(1757595999.884:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 81.236508][ T24] audit: type=1326 audit(1757595999.884:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 81.705056][ T24] audit: type=1326 audit(1757595999.884:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 81.810572][ T1359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.043807][ T283] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.053314][ T283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.053441][ T24] audit: type=1326 audit(1757595999.884:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 82.061367][ T283] usb 3-1: Product: syz [ 82.061378][ T283] usb 3-1: Manufacturer: syz [ 82.061387][ T283] usb 3-1: SerialNumber: syz [ 82.138445][ T24] audit: type=1326 audit(1757595999.884:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 82.165868][ T24] audit: type=1326 audit(1757595999.884:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 82.176468][ T1399] xt_bpf: check failed: parse error [ 82.190078][ T24] audit: type=1326 audit(1757595999.884:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 82.207744][ T1359] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 82.226119][ T24] audit: type=1326 audit(1757595999.884:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1378 comm="syz.4.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8854c76ba9 code=0x7ffc0000 [ 82.231743][ T1359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.333599][ T1418] SELinux: failed to load policy [ 82.529964][ T962] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 82.689934][ T283] usb 3-1: cannot find UAC_HEADER [ 82.695125][ T283] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 82.698084][ T1359] attempt to access beyond end of device [ 82.698084][ T1359] loop1: rw=2049, want=81920, limit=40427 [ 82.720938][ T1359] attempt to access beyond end of device [ 82.720938][ T1359] loop1: rw=2049, want=53248, limit=40427 [ 82.749671][ T1359] attempt to access beyond end of device [ 82.749671][ T1359] loop1: rw=2049, want=67016, limit=40427 [ 82.891525][ T283] usb 3-1: USB disconnect, device number 12 [ 82.899916][ T962] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 82.911508][ T962] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.930436][ T962] usb 5-1: config 0 interface 0 has no altsetting 0 [ 82.966802][ T962] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 82.977343][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.986409][ T962] usb 5-1: config 0 descriptor?? [ 83.239930][ T299] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 83.349888][ T338] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 83.462077][ T1436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 83.472980][ T1435] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 83.490265][ T299] usb 4-1: Using ep0 maxpacket: 16 [ 83.490815][ T962] holtek 0003:1241:5015.000A: item fetching failed at offset 3/5 [ 83.505021][ T962] holtek 0003:1241:5015.000A: parse failed [ 83.510975][ T962] holtek: probe of 0003:1241:5015.000A failed with error -22 [ 83.563297][ T1440] EXT4-fs (loop2): Test dummy encryption mode enabled [ 83.570664][ T1440] EXT4-fs (loop2): unsupported descriptor size 255 [ 83.619907][ T299] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.632780][ T299] usb 4-1: config 1 has no interface number 1 [ 83.638980][ T299] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 122, changing to 7 [ 83.715031][ T962] usb 5-1: USB disconnect, device number 4 [ 83.926653][ T338] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 83.937857][ T338] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.950686][ T338] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.957309][ T338] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 83.966363][ T338] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.975199][ T338] usb 2-1: config 0 descriptor?? [ 84.049942][ T299] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 84.059046][ T299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.067111][ T299] usb 4-1: Product: syz [ 84.071296][ T299] usb 4-1: Manufacturer: syz [ 84.075895][ T299] usb 4-1: SerialNumber: syz [ 84.320864][ T1431] udc-core: couldn't find an available UDC or it's busy [ 84.327991][ T1431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.335913][ T1431] udc-core: couldn't find an available UDC or it's busy [ 84.343057][ T1431] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.426471][ T1452] SELinux: policydb table sizes (149,0) do not match mine (8,7) [ 84.440479][ T298] print_req_error: 165 callbacks suppressed [ 84.440497][ T298] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.460909][ T760] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.474218][ T338] holtek 0003:1241:5015.000B: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.1-1/input0 [ 84.479973][ T1452] SELinux: failed to load policy [ 84.488319][ T338] holtek 0003:1241:5015.000B: no inputs found [ 84.492580][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.505653][ T760] blk_update_request: I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.512936][ T343] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.519713][ T299] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 84.533681][ T440] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 84.539509][ T299] usb 4-1: 2:1 : sample bitwidth 82 in over sample bytes 4 [ 84.558218][ T299] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 84.564558][ T298] blk_update_request: I/O error, dev loop0, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.575744][ T298] buffer_io_error: 130 callbacks suppressed [ 84.575760][ T298] Buffer I/O error on dev loop0p1, logical block 1, async page read [ 84.614405][ T760] Buffer I/O error on dev loop0p2, logical block 4080, async page read [ 84.617618][ T299] usb 4-1: USB disconnect, device number 5 [ 84.623262][ T302] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.641489][ T440] blk_update_request: I/O error, dev loop0, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.669923][ T343] blk_update_request: I/O error, dev loop0, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 84.687019][ T343] Buffer I/O error on dev loop0p6, logical block 11648, async page read [ 84.692762][ T440] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 84.695848][ T343] Buffer I/O error on dev loop0p6, logical block 11649, async page read [ 84.707878][ T302] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 84.719885][ T343] Buffer I/O error on dev loop0p6, logical block 11650, async page read [ 84.726661][ T440] Buffer I/O error on dev loop0p7, logical block 0, async page read [ 84.728272][ T343] Buffer I/O error on dev loop0p6, logical block 11651, async page read [ 84.744789][ T302] Buffer I/O error on dev loop0p3, logical block 0, async page read [ 84.923529][ T1457] cgroup: syz.0.292 (1457) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 84.959841][ T1457] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 85.055239][ T1465] ================================================================== [ 85.063372][ T1465] BUG: KASAN: use-after-free in mutex_lock+0x7f/0xe0 [ 85.070228][ T1465] Write of size 8 at addr ffff888126dc9840 by task syz.3.295/1465 [ 85.078032][ T1465] [ 85.080369][ T1465] CPU: 1 PID: 1465 Comm: syz.3.295 Not tainted syzkaller #0 [ 85.087644][ T1465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 85.097698][ T1465] Call Trace: [ 85.101017][ T1465] __dump_stack+0x21/0x24 [ 85.105452][ T1465] dump_stack_lvl+0x169/0x1d8 [ 85.110131][ T1465] ? show_regs_print_info+0x18/0x18 [ 85.115326][ T1465] ? thaw_kernel_threads+0x220/0x220 [ 85.120607][ T1465] ? __kasan_kmalloc+0xec/0x110 [ 85.125453][ T1465] ? __kasan_kmalloc+0xda/0x110 [ 85.130304][ T1465] print_address_description+0x7f/0x2c0 [ 85.135989][ T1465] ? mutex_lock+0x7f/0xe0 [ 85.140335][ T1465] kasan_report+0xe2/0x130 [ 85.144763][ T1465] ? mutex_lock+0x7f/0xe0 [ 85.149100][ T1465] kasan_check_range+0x280/0x290 [ 85.154042][ T1465] __kasan_check_write+0x14/0x20 [ 85.158989][ T1465] mutex_lock+0x7f/0xe0 [ 85.163159][ T1465] ? mutex_trylock+0xa0/0xa0 [ 85.167756][ T1465] steam_input_open+0x91/0x160 [ 85.172533][ T1465] ? steam_input_register+0xa70/0xa70 [ 85.177910][ T1465] ? __kasan_check_write+0x14/0x20 [ 85.183018][ T1465] ? mutex_lock_interruptible+0x8c/0xe0 [ 85.188560][ T1465] input_open_device+0x14c/0x2a0 [ 85.193497][ T1465] evdev_open+0x4d2/0x5e0 [ 85.197859][ T1465] chrdev_open+0x597/0x670 [ 85.202288][ T1465] ? cd_forget+0x170/0x170 [ 85.206701][ T1465] ? cd_forget+0x170/0x170 [ 85.211112][ T1465] do_dentry_open+0x793/0x1090 [ 85.215879][ T1465] vfs_open+0x73/0x80 [ 85.219868][ T1465] path_openat+0x27ad/0x3160 [ 85.224492][ T1465] ? __kasan_slab_alloc+0xcf/0xf0 [ 85.229600][ T1465] ? kmem_cache_alloc+0x165/0x2e0 [ 85.234624][ T1465] ? getname+0x19/0x20 [ 85.238694][ T1465] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.244763][ T1465] ? do_filp_open+0x3e0/0x3e0 [ 85.249584][ T1465] ? expand_files+0xde/0x8e0 [ 85.254196][ T1465] do_filp_open+0x1b3/0x3e0 [ 85.258698][ T1465] ? vfs_tmpfile+0x2c0/0x2c0 [ 85.263430][ T1465] ? get_unused_fd_flags+0x92/0xa0 [ 85.268562][ T1465] do_sys_openat2+0x14c/0x6d0 [ 85.273253][ T1465] ? __se_sys_futex+0x2b4/0x360 [ 85.278110][ T1465] ? do_sys_open+0xe0/0xe0 [ 85.282531][ T1465] ? switch_fpu_return+0x197/0x340 [ 85.287642][ T1465] ? fpu__clear_all+0x20/0x20 [ 85.292318][ T1465] __x64_sys_openat+0x136/0x160 [ 85.297183][ T1465] do_syscall_64+0x31/0x40 [ 85.301600][ T1465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.307492][ T1465] RIP: 0033:0x7f92be059510 [ 85.311934][ T1465] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 85.331542][ T1465] RSP: 002b:00007f92bcac2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 85.339960][ T1465] RAX: ffffffffffffffda RBX: 0000000000008080 RCX: 00007f92be059510 [ 85.347963][ T1465] RDX: 0000000000008080 RSI: 00007f92bcac2c10 RDI: 00000000ffffff9c [ 85.355937][ T1465] RBP: 00007f92bcac2c10 R08: 0000000000000000 R09: 0000000000000000 [ 85.363908][ T1465] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 85.372010][ T1465] R13: 00007f92be2a2038 R14: 00007f92be2a1fa0 R15: 00007ffe3c047cd8 [ 85.380003][ T1465] [ 85.382337][ T1465] Allocated by task 0: [ 85.386393][ T1465] (stack is not available) [ 85.390796][ T1465] [ 85.393117][ T1465] Freed by task 95: [ 85.396963][ T1465] kasan_set_track+0x4a/0x70 [ 85.401563][ T1465] kasan_set_free_info+0x23/0x40 [ 85.406508][ T1465] ____kasan_slab_free+0x125/0x160 [ 85.411700][ T1465] __kasan_slab_free+0x11/0x20 [ 85.416493][ T1465] slab_free_freelist_hook+0xc5/0x190 [ 85.422133][ T1465] kfree+0xc0/0x270 [ 85.425943][ T1465] skb_release_data+0x532/0x670 [ 85.430790][ T1465] consume_skb+0xab/0x1f0 [ 85.435117][ T1465] skb_free_datagram+0x28/0xe0 [ 85.439874][ T1465] unix_dgram_recvmsg+0x9c0/0xd40 [ 85.444892][ T1465] ____sys_recvmsg+0x291/0x580 [ 85.449651][ T1465] ___sys_recvmsg+0x1af/0x4f0 [ 85.454340][ T1465] __x64_sys_recvmsg+0x1dd/0x2a0 [ 85.459290][ T1465] do_syscall_64+0x31/0x40 [ 85.463701][ T1465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.469578][ T1465] [ 85.471903][ T1465] The buggy address belongs to the object at ffff888126dc9800 [ 85.471903][ T1465] which belongs to the cache kmalloc-512 of size 512 [ 85.485973][ T1465] The buggy address is located 64 bytes inside of [ 85.485973][ T1465] 512-byte region [ffff888126dc9800, ffff888126dc9a00) [ 85.499150][ T1465] The buggy address belongs to the page: [ 85.504798][ T1465] page:ffffea00049b7200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126dc8 [ 85.515026][ T1465] head:ffffea00049b7200 order:2 compound_mapcount:0 compound_pincount:0 [ 85.523361][ T1465] flags: 0x4000000000010200(slab|head) [ 85.529021][ T1465] raw: 4000000000010200 ffffea00049a5400 0000000500000005 ffff888100043080 [ 85.537605][ T1465] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 85.546285][ T1465] page dumped because: kasan: bad access detected [ 85.552704][ T1465] page_owner tracks the page as allocated [ 85.558451][ T1465] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 276, ts 24096429215, free_ts 0 [ 85.576673][ T1465] prep_new_page+0x179/0x180 [ 85.581281][ T1465] get_page_from_freelist+0x2235/0x23d0 [ 85.586823][ T1465] __alloc_pages_nodemask+0x268/0x5f0 [ 85.592185][ T1465] new_slab+0x84/0x3f0 [ 85.596278][ T1465] ___slab_alloc+0x2a6/0x450 [ 85.600863][ T1465] __slab_alloc+0x63/0xa0 [ 85.605186][ T1465] kmem_cache_alloc_trace+0x1b3/0x2e0 [ 85.610644][ T1465] rtnl_newlink+0x103/0x1640 [ 85.615242][ T1465] rtnetlink_rcv_msg+0x9db/0xb90 [ 85.620189][ T1465] netlink_rcv_skb+0x1e0/0x430 [ 85.624945][ T1465] rtnetlink_rcv+0x1c/0x20 [ 85.629353][ T1465] netlink_unicast+0x876/0xa40 [ 85.634108][ T1465] netlink_sendmsg+0x88d/0xb30 [ 85.638866][ T1465] __sys_sendto+0x41d/0x580 [ 85.643451][ T1465] __x64_sys_sendto+0xe5/0x100 [ 85.648215][ T1465] do_syscall_64+0x31/0x40 [ 85.652622][ T1465] page_owner free stack trace missing [ 85.657980][ T1465] [ 85.660299][ T1465] Memory state around the buggy address: [ 85.665930][ T1465] ffff888126dc9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.674182][ T1465] ffff888126dc9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 85.682239][ T1465] >ffff888126dc9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.690291][ T1465] ^ [ 85.696451][ T1465] ffff888126dc9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.704505][ T1465] ffff888126dc9900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.712558][ T1465] ================================================================== [ 85.720609][ T1465] Disabling lock debugging due to kernel taint [ 85.730433][ T1465] general protection fault, probably for non-canonical address 0xdffffc0000000213: 0000 [#1] PREEMPT SMP KASAN [ 85.742182][ T1465] KASAN: probably user-memory-access in range [0x0000000000001098-0x000000000000109f] [ 85.751730][ T1465] CPU: 0 PID: 1465 Comm: syz.3.295 Tainted: G B syzkaller #0 [ 85.760396][ T1465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 85.770468][ T1465] RIP: 0010:steam_send_report+0x66/0x310 [ 85.776099][ T1465] Code: 80 3c 18 00 74 12 4c 89 f7 e8 f6 34 3f fe 48 ba 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 9c 24 98 10 00 00 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 cc 34 3f fe 48 ba 00 00 00 00 00 fc [ 85.795707][ T1465] RSP: 0018:ffffc900014e7668 EFLAGS: 00010202 [ 85.801778][ T1465] RAX: 0000000000000213 RBX: 0000000000001098 RCX: 0000000000000282 [ 85.809859][ T1465] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888126dc9830 [ 85.817972][ T1465] RBP: ffffc900014e76b0 R08: dffffc0000000000 R09: fffff5200029cec9 [ 85.826476][ T1465] R10: fffff5200029cec9 R11: 1ffff9200029cec8 R12: 0000000000000000 [ 85.835071][ T1465] R13: 1ffff9200029ced8 R14: ffff888126dc9830 R15: ffffc900014e76e0 [ 85.843051][ T1465] FS: 00007f92bcac36c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 85.851989][ T1465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.858660][ T1465] CR2: 00007f80e2d14d58 CR3: 0000000136ff3000 CR4: 00000000003506b0 [ 85.866716][ T1465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 85.874689][ T1465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 85.882653][ T1465] Call Trace: [ 85.885949][ T1465] steam_input_open+0xde/0x160 [ 85.890709][ T1465] ? steam_input_register+0xa70/0xa70 [ 85.896603][ T1465] ? __kasan_check_write+0x14/0x20 [ 85.901725][ T1465] ? mutex_lock_interruptible+0x8c/0xe0 [ 85.907302][ T1465] input_open_device+0x14c/0x2a0 [ 85.912243][ T1465] evdev_open+0x4d2/0x5e0 [ 85.916578][ T1465] chrdev_open+0x597/0x670 [ 85.920998][ T1465] ? cd_forget+0x170/0x170 [ 85.925412][ T1465] ? cd_forget+0x170/0x170 [ 85.929824][ T1465] do_dentry_open+0x793/0x1090 [ 85.934587][ T1465] vfs_open+0x73/0x80 [ 85.938593][ T1465] path_openat+0x27ad/0x3160 [ 85.943184][ T1465] ? __kasan_slab_alloc+0xcf/0xf0 [ 85.948207][ T1465] ? kmem_cache_alloc+0x165/0x2e0 [ 85.953228][ T1465] ? getname+0x19/0x20 [ 85.957294][ T1465] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 85.963360][ T1465] ? do_filp_open+0x3e0/0x3e0 [ 85.968031][ T1465] ? expand_files+0xde/0x8e0 [ 85.972617][ T1465] do_filp_open+0x1b3/0x3e0 [ 85.977115][ T1465] ? vfs_tmpfile+0x2c0/0x2c0 [ 85.981707][ T1465] ? get_unused_fd_flags+0x92/0xa0 [ 85.986811][ T1465] do_sys_openat2+0x14c/0x6d0 [ 85.991494][ T1465] ? __se_sys_futex+0x2b4/0x360 [ 85.996340][ T1465] ? do_sys_open+0xe0/0xe0 [ 86.000751][ T1465] ? switch_fpu_return+0x197/0x340 [ 86.005860][ T1465] ? fpu__clear_all+0x20/0x20 [ 86.010534][ T1465] __x64_sys_openat+0x136/0x160 [ 86.015382][ T1465] do_syscall_64+0x31/0x40 [ 86.019802][ T1465] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 86.025685][ T1465] RIP: 0033:0x7f92be059510 [ 86.030101][ T1465] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 86.049888][ T1465] RSP: 002b:00007f92bcac2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 86.058392][ T1465] RAX: ffffffffffffffda RBX: 0000000000008080 RCX: 00007f92be059510 [ 86.066376][ T1465] RDX: 0000000000008080 RSI: 00007f92bcac2c10 RDI: 00000000ffffff9c [ 86.074385][ T1465] RBP: 00007f92bcac2c10 R08: 0000000000000000 R09: 0000000000000000 [ 86.082350][ T1465] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 86.090320][ T1465] R13: 00007f92be2a2038 R14: 00007f92be2a1fa0 R15: 00007ffe3c047cd8 [ 86.098436][ T1465] Modules linked in: [ 86.107746][ T24] kauditd_printk_skb: 53 callbacks suppressed [ 86.107761][ T24] audit: type=1400 audit(1757596004.814:509): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 86.124000][ T1463] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 86.172442][ T24] audit: type=1400 audit(1757596004.814:510): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.217101][ T24] audit: type=1400 audit(1757596004.814:511): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.235102][ T1463] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.294: bad orphan inode 11 [ 86.250153][ T1463] EXT4-fs (loop0): Remounting filesystem read-only [ 86.257974][ T1463] ext4_test_bit(bit=10, block=4) = 1 [ 86.268780][ T1463] is_bad_inode(inode)=0 [ 86.278604][ T1463] NEXT_ORPHAN(inode)=3254779904 [ 86.283798][ T24] audit: type=1400 audit(1757596004.814:512): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.292129][ T1465] ---[ end trace 11f8ade34b030298 ]--- [ 86.309860][ T1463] max_ino=32 [ 86.309865][ T1463] i_nlink=0 [ 86.309938][ T1463] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier,noblock_validity,mblk_io_submit,data_err=ignore,errors=remount-ro,inlinecrypt, [ 86.313207][ T1465] RIP: 0010:steam_send_report+0x66/0x310 [ 86.332548][ T24] audit: type=1400 audit(1757596004.814:513): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.389192][ T1465] Code: 80 3c 18 00 74 12 4c 89 f7 e8 f6 34 3f fe 48 ba 00 00 00 00 00 fc ff df 4d 8b 26 49 8d 9c 24 98 10 00 00 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 df e8 cc 34 3f fe 48 ba 00 00 00 00 00 fc [ 86.394675][ T24] audit: type=1400 audit(1757596004.814:514): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.417545][ T1465] RSP: 0018:ffffc900014e7668 EFLAGS: 00010202 [ 86.455588][ T1465] RAX: 0000000000000213 RBX: 0000000000001098 RCX: 0000000000000282 [ 86.475353][ T1465] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffff888126dc9830 [ 86.502909][ T24] audit: type=1400 audit(1757596004.814:515): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.518076][ T1465] RBP: ffffc900014e76b0 R08: dffffc0000000000 R09: fffff5200029cec9 [ 86.525824][ T24] audit: type=1400 audit(1757596005.004:516): avc: denied { write } for pid=1464 comm="syz.3.295" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 86.557532][ T1465] R10: fffff5200029cec9 R11: 1ffff9200029cec8 R12: 0000000000000000 [ 86.565985][ T1465] R13: 1ffff9200029ced8 R14: ffff888126dc9830 R15: ffffc900014e76e0 [ 86.574133][ T1465] FS: 00007f92bcac36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 86.583176][ T1465] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.589926][ T1465] CR2: 00007fd6901cff98 CR3: 0000000136ff3000 CR4: 00000000003506a0 [ 86.598019][ T1465] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.606051][ T1465] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.614215][ T1465] Kernel panic - not syncing: Fatal exception [ 86.620559][ T1465] Kernel Offset: disabled [ 86.624917][ T1465] Rebooting in 86400 seconds..